Dbx MCP Server

by t8y2• 28k•• Scanned•Claim this listing•Request removal
Database Managementaicliclickhousedatabasedatabase client

25 MB lightweight cross-platform database client for 100+ databases, including MySQL, PostgreSQL, SQLite, Redis, MongoDB, DuckDB, SQL Server, and Dameng. Built-in AI, MCP Server, CLI, desktop and Docker. | 轻量级跨平台数据库管理工具，支持 MySQL、PostgreSQL、SQLite、Redis、MongoDB、达梦等 100+ 数据库，提供桌面端、Docker、CLI、内置 AI 助手和 MCP。

Dbx is an open-source mcp server by t8y2, written mainly in Rust, with 28,426 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 2aaaf83. Seen able to run shell commands, run dynamic code, read environment and secrets. Scan policy

aboutREADMEsecurityreviews
Scanned
Full scan at 2aaaf83 · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit736 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (200)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    agents/drivers/argo-go/bench/agent_compare.py:114
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    agents/drivers/hive-go/bench/agent_compare.py:114
  • medium
    calamine@0.30.1: 2 known vulnerabilities
    RUSTSEC-2026-0436, RUSTSEC-2026-0436
    Cargo.lock
  • medium
    hickory-resolver@0.26.1: 6 known vulnerabilities
    GHSA-5j98-2g5x-46v6, GHSA-6f2x-v7q7-m7m5, GHSA-6w6g-hm98-mhgm, GHSA-5j98-2g5x-46v6, GHSA-6f2x-v7q7-m7m5 +1 more
    Cargo.lock
  • medium
    quick-xml@0.37.5: 4 known vulnerabilities
    RUSTSEC-2026-0194, RUSTSEC-2026-0195, RUSTSEC-2026-0194, RUSTSEC-2026-0195
    Cargo.lock
  • medium
    quinn-proto@0.11.16: 10 known vulnerabilities
    RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0341, RUSTSEC-2026-0342 +5 more
    Cargo.lock
  • medium
    russh@0.60.3: 40 known vulnerabilities
    GHSA-35g8-35p8-c8fw, GHSA-47hw-gvq5-r2gm, GHSA-4p9f-7p9m-5vfg, GHSA-4r3c-5hpg-58qr, GHSA-4wc5-f2rc-q74m +35 more
    Cargo.lock
  • medium
    rustls-webpki@0.101.7: 8 known vulnerabilities
    RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382, RUSTSEC-2026-0098 +3 more
    Cargo.lock
  • medium
    rustls-webpki@0.102.8: 5 known vulnerabilities
    RUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
    Cargo.lock
  • medium
    github.com/apache/thrift@0.22.0: 6 known vulnerabilities
    GHSA-8wv5-x4w7-5gww, GHSA-wf45-q9ch-q8gh, GHSA-8wv5-x4w7-5gww, GHSA-wf45-q9ch-q8gh, GHSA-8wv5-x4w7-5gww +1 more
    agents/drivers/argo-go/go.mod
  • medium
    golang.org/x/net@0.10.0: 24 known vulnerabilities
    GO-2023-1988, GO-2023-2102, GO-2024-2687, GO-2024-3333, GO-2025-3503 +19 more
    agents/drivers/cassandra-go/go.mod
  • medium
    github.com/klauspost/compress@1.18.0: 1 known vulnerability
    GO-2026-5841
    agents/drivers/rocketmq/go.mod
  • medium
    golang.org/x/text@0.3.3: 4 known vulnerabilities
    GO-2021-0113, GO-2022-1059, GO-2026-5970, GO-2026-6629
    agents/drivers/vastbase-go/go.mod
  • medium
    golang.org/x/net@0.7.0: 72 known vulnerabilities
    GO-2023-1988, GO-2023-2102, GO-2024-2687, GO-2024-3333, GO-2025-3503 +67 more
    agents/drivers/zookeeper/go.mod
  • medium
    golang.org/x/net@0.0.0-20210326220855-61e056675ecf: 30 known vulnerabilities
    GO-2021-0238, GO-2022-0236, GO-2022-0288, GO-2022-0969, GO-2022-1144 +25 more
    agents/go-common/go-gssapi/go.sum
  • medium
    gopkg.in/yaml.v3@3.0.0-20200313102051-9f266ea9e77c: 1 known vulnerability
    GO-2022-0603
    agents/go-common/go-gssapi/go.sum
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    docs/pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    docs/pnpm-lock.yaml
  • medium
    zod@4.4.3: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    docs/pnpm-lock.yaml
  • medium
    decode-uri-component@0.2.2: 2 known vulnerabilities
    GHSA-qr28-fpjm-wq7f, GHSA-vcc3-ghjq-m6fr
    pnpm-lock.yaml
  • medium
    happy-dom@20.10.6: 3 known vulnerabilities
    GHSA-5fpq-26gf-qwcr, GHSA-834v-8h66-3h79, GHSA-c8p4-j97h-3vg8
    pnpm-lock.yaml
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    mio@0.8.10: 1 known vulnerability
    RUSTSEC-2024-0019
    vendor/rumqttc/Cargo.lock
  • medium
    openssl@0.10.64: 11 known vulnerabilities
    RUSTSEC-2024-0357, RUSTSEC-2025-0004, RUSTSEC-2025-0022, GHSA-8c75-8mhr-p7r9, GHSA-ghm9-cr32-g9qj +6 more
    vendor/rumqttc/Cargo.lock
  • medium
    rustls@0.22.2: 4 known vulnerabilities
    RUSTSEC-2024-0336, RUSTSEC-2026-0346, RUSTSEC-2026-0349, GHSA-h2v8-394m-p7vv
    vendor/rumqttc/Cargo.lock
  • medium
    rustls-webpki@0.102.2: 5 known vulnerabilities
    RUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
    vendor/rumqttc/Cargo.lock
  • medium
    openssl@0.10.72: 8 known vulnerabilities
    GHSA-8c75-8mhr-p7r9, GHSA-ghm9-cr32-g9qj, GHSA-hppc-g8h3-xhp3, GHSA-phqj-4mhp-q6mq, GHSA-pqf5-4pqq-29f5 +3 more
    vendor/tauri-plugin-updater/Cargo.lock
  • medium
    quick-xml@0.32.0: 2 known vulnerabilities
    RUSTSEC-2026-0194, RUSTSEC-2026-0195
    vendor/tauri-plugin-updater/Cargo.lock
  • medium
    rustls-webpki@0.103.10: 4 known vulnerabilities
    RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
    vendor/tauri-plugin-updater/Cargo.lock
  • medium
    tauri@2.10.0: 1 known vulnerability
    GHSA-7gmj-67g7-phm9
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    .github/scripts/actions-efficiency.test.mjs:27
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    .github/scripts/ci-workflow.test.mjs:29
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/__tests__/startupInputGuard.spec.ts:12
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/editor/__tests__/EditorSettingsDialog.mcpCapabilities.integration.spec.ts:281
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/editor/__tests__/EditorSettingsDialog.searchNavigation.integration.spec.ts:80
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/editor/__tests__/EditorSettingsDialog.searchNavigation.integration.spec.ts:175
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/editor/__tests__/EditorSettingsDialog.searchNavigation.integration.spec.ts:420
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/editor/__tests__/QueryEditor.snippetEscape.spec.ts:30
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/editor/__tests__/QueryHistory.mcpNavigation.spec.ts:117
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/editor/__tests__/mcpQueryTimeoutHarness.ts:26
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:23
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:24
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:80
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:88
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:98
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:411
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:416
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/components/plugins/PluginConnectionFields.spec.ts:420
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.commentAlignment.spec.ts:31
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.horizontalScroll.spec.ts:21
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.remoteSearch.spec.ts:63
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.searchOptions.spec.ts:40
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.searchOptions.spec.ts:138
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.searchOptions.spec.ts:153
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.searchScope.spec.ts:72
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.stickySearchBoundary.spec.ts:38
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.tableSearchFocus.spec.ts:44
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/ConnectionTree.tableSearchShortcut.spec.ts:81
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/components/sidebar/__tests__/SidebarTreeRuntimeHost.expansion.spec.ts:112
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/connection/connectionDialogProfileSwitch.spec.ts:63
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/connection/connectionDialogProfileSwitch.spec.ts:122
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/connection/gbase8sConnectionDialog.spec.ts:22
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/editor/queryEditorBatchColumnSelectionRowGuard.spec.ts:69
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/editor/queryEditorBatchColumnSelectionSelectAll.spec.ts:59
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/editor/queryEditorCompletionKeymap.spec.ts:118
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/editor/queryEditorCompletionKeymap.spec.ts:292
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/editor/queryEditorCompletionKeymap.spec.ts:307
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/editor/queryEditorCompletionKeymap.spec.ts:325
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/__tests__/editor/queryEditorCompletionKeymap.spec.ts:575
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/lib/__tests__/imports/navicatImport.spec.ts:176
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/lib/__tests__/imports/navicatImport.spec.ts:187
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/lib/connection/__tests__/sshAuthMethod.spec.ts:12
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/lib/connection/__tests__/sshAuthMethod.spec.ts:39
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/lib/connection/__tests__/sshAuthMethod.spec.ts:40
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/navigation/__tests__/appNavigationRestore.spec.ts:108
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/navigation/__tests__/appNavigationRestore.spec.ts:117
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/lib/plugins/pluginFieldPicker.spec.ts:38
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/lib/plugins/pluginFieldPicker.spec.ts:42
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/plugins/pluginHostBridge.spec.ts:1871
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/plugins/pluginHostBridge.spec.ts:2431
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/desktop/src/lib/plugins/pluginHostBridgeSdkTransfer.spec.ts:34
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    apps/desktop/src/stores/__tests__/connectionStore.savePassword.spec.ts:823
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/app-tests/mcpReleaseSigning.test.ts:51
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/app-tests/savedSqlConnectionSwitch.test.ts:63
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    packages/app-tests/sqlPreviewDialogLayout.test.ts:53
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    README.zh-CN.md:12
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    README.md:12
  • low
    Possible example credential in docs/tests: generic-api-key
    agents/drivers/access/src/test/resources/db2007-enc.accdb:2
  • low
    Possible example credential in docs/tests: private-key
    agents/drivers/mongodb/src/test/java/com/dbx/agent/mongodb/MongoAgentTest.java:132
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    agents/go-common/go-gssapi/krb5/context_token_test.go:18
  • low
    Possible example credential in docs/tests: generic-api-key
    agents/go-common/gosasl/sasl_test.go:113
  • low
    Possible example credential in docs/tests: generic-api-key
    agents/go-common/go-gssapi/krb5/message_token_test.go:25
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    apps/desktop/src/components/connection/__tests__/ConnectionDialog.savePassword.spec.ts:306
  • low
    Possible example credential in docs/tests: generic-api-key
    21 matches in this file
    apps/desktop/src/components/redis/RedisKeyBrowser.expiry.spec.ts:1589
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    apps/desktop/src/lib/__tests__/database/defaultDatabase.spec.ts:16
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/desktop/src/lib/__tests__/redis/redisValuePresentation.spec.ts:190
  • low
    Possible example credential in docs/tests: private-key
    apps/desktop/src/lib/plugins/pluginFieldPicker.spec.ts:59
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/desktop/src/stores/__tests__/connectionStore.completion.spec.ts:345
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    crates/dbx-core/tests/redis_cluster_databases.rs:338
  • low
    Possible example credential in docs/tests: generic-api-key
    docs/app/[lang]/community/page.tsx:27
  • low
    Possible example credential in docs/tests: generic-api-key
    docs/components/DocsSidebarFooter.tsx:104
  • low
    Possible example credential in docs/tests: generic-api-key
    docs/mq-quick-start.md:87
  • low
    crypto-bigint@0.7.0-rc.28: 2 known vulnerabilities
    RUSTSEC-2026-0387, RUSTSEC-2026-0387
    Cargo.lock
  • low
    ctutils@0.4.2: 2 known vulnerabilities
    RUSTSEC-2026-0385, RUSTSEC-2026-0385
    Cargo.lock
  • low
    glib@0.18.5: 2 known vulnerabilities
    RUSTSEC-2024-0429, RUSTSEC-2024-0429
    Cargo.lock
  • low
    h2@0.3.27: 1 known vulnerability
    RUSTSEC-2026-0258
    Cargo.lock
  • low
    h2@0.4.15: 1 known vulnerability
    RUSTSEC-2026-0258
    Cargo.lock
  • low
    instant@0.1.13: 2 known vulnerabilities
    RUSTSEC-2024-0384, RUSTSEC-2024-0384
    Cargo.lock
  • low
    jsonwebtoken@9.3.1: 2 known vulnerabilities
    GHSA-h395-gr6q-cpjc, GHSA-h395-gr6q-cpjc
    Cargo.lock
  • low
    lru@0.16.4: 2 known vulnerabilities
    RUSTSEC-2026-0253, RUSTSEC-2026-0253
    Cargo.lock
  • low
    lru@0.18.1: 2 known vulnerabilities
    RUSTSEC-2026-0253, RUSTSEC-2026-0253
    Cargo.lock
  • low
    pageant@0.2.1: 4 known vulnerabilities
    GHSA-662x-8wvj-2276, GHSA-g4mp-vgx3-xrvm, GHSA-662x-8wvj-2276, GHSA-g4mp-vgx3-xrvm
    Cargo.lock
  • low
    pin-utils@0.1.0: 3 known vulnerabilities
    RUSTSEC-2026-0441, RUSTSEC-2026-0441, RUSTSEC-2026-0441
    Cargo.lock
  • low
    proc-macro-error@1.0.4: 2 known vulnerabilities
    RUSTSEC-2024-0370, RUSTSEC-2024-0370
    Cargo.lock
  • low
    rkyv@0.7.46: 2 known vulnerabilities
    RUSTSEC-2026-0235, RUSTSEC-2026-0235
    Cargo.lock
  • low
    rsa@0.10.0-rc.16: 2 known vulnerabilities
    RUSTSEC-2023-0071, RUSTSEC-2023-0071
    Cargo.lock
  • low
    rustls@0.21.12: 6 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0349, GHSA-h2v8-394m-p7vv, RUSTSEC-2026-0346, RUSTSEC-2026-0349 +1 more
    Cargo.lock
  • low
    rustls@0.22.4: 3 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0349, GHSA-h2v8-394m-p7vv
    Cargo.lock
  • low
    rustls@0.23.43: 8 known vulnerabilities
    RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349, RUSTSEC-2026-0285 +3 more
    Cargo.lock
  • low
    rustls-pemfile@1.0.4: 2 known vulnerabilities
    RUSTSEC-2025-0134, RUSTSEC-2025-0134
    Cargo.lock
  • low
    rustls-pemfile@2.2.0: 2 known vulnerabilities
    RUSTSEC-2025-0134, RUSTSEC-2025-0134
    Cargo.lock
  • low
    rustls-webpki@0.103.13: 3 known vulnerabilities
    RUSTSEC-2026-0382, RUSTSEC-2026-0382, RUSTSEC-2026-0382
    Cargo.lock
  • low
    tokio@1.53.1: 3 known vulnerabilities
    RUSTSEC-2026-0386, RUSTSEC-2026-0386, RUSTSEC-2026-0386
    Cargo.lock
  • low
    unic-char-property@0.9.0: 2 known vulnerabilities
    RUSTSEC-2025-0081, RUSTSEC-2025-0081
    Cargo.lock
  • low
    unic-char-range@0.9.0: 2 known vulnerabilities
    RUSTSEC-2025-0075, RUSTSEC-2025-0075
    Cargo.lock
  • low
    unic-common@0.9.0: 2 known vulnerabilities
    RUSTSEC-2025-0080, RUSTSEC-2025-0080
    Cargo.lock
  • low
    unic-ucd-ident@0.9.0: 2 known vulnerabilities
    RUSTSEC-2025-0100, RUSTSEC-2025-0100
    Cargo.lock
  • low
    unic-ucd-version@0.9.0: 2 known vulnerabilities
    RUSTSEC-2025-0098, RUSTSEC-2025-0098
    Cargo.lock
  • low
    unsafe-libyaml@0.2.11: 2 known vulnerabilities
    RUSTSEC-2024-0449, RUSTSEC-2024-0449
    Cargo.lock
  • low
    webpki-root-certs@1.0.9: 1 known vulnerability
    RUSTSEC-2026-0383
    Cargo.lock
  • low
    webpki-roots@1.0.9: 3 known vulnerabilities
    RUSTSEC-2026-0381, RUSTSEC-2026-0381, RUSTSEC-2026-0381
    Cargo.lock
  • low
    zbus_names@3.0.0: 1 known vulnerability
    RUSTSEC-2026-0371
    Cargo.lock
  • low
    zbus_names@4.3.4: 1 known vulnerability
    RUSTSEC-2026-0371
    Cargo.lock
  • low
    zstd@0.13.3: 2 known vulnerabilities
    RUSTSEC-2026-0391, RUSTSEC-2026-0391
    Cargo.lock
  • low
    zstd-safe@7.2.4: 24 known vulnerabilities
    RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399 +19 more
    Cargo.lock
  • low
    zstd-sys@2.0.16+zstd.1.5.7: 2 known vulnerabilities
    RUSTSEC-2026-0410, RUSTSEC-2026-0410
    Cargo.lock
  • low
    zvariant@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0370
    Cargo.lock
  • low
    zvariant@5.13.1: 1 known vulnerability
    RUSTSEC-2026-0370
    Cargo.lock
  • low
    zvariant_derive@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0372
    Cargo.lock
  • low
    zvariant_derive@5.13.1: 1 known vulnerability
    RUSTSEC-2026-0372
    Cargo.lock
  • low
    golang.org/x/net@0.41.0: 51 known vulnerabilities
    GO-2026-4440, GO-2026-4441, GO-2026-4918, GO-2026-5025, GO-2026-5026 +46 more
    agents/drivers/argo-go/go.mod
  • low
    arrow-data@58.4.0: 1 known vulnerability
    RUSTSEC-2026-0442
    agents/drivers/duckdb/Cargo.lock
  • low
    rustls@0.23.42: 4 known vulnerabilities
    RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    agents/drivers/duckdb/Cargo.lock
  • low
    golang.org/x/net@0.61.0: 2 known vulnerabilities
    GO-2026-6860, GO-2026-6866
    agents/drivers/etcd-go/go.mod
  • low
    golang.org/x/net@0.17.0: 21 known vulnerabilities
    GO-2024-2687, GO-2024-3333, GO-2025-3503, GO-2025-3595, GO-2026-4440 +16 more
    agents/drivers/nebula-go/go.mod
  • low
    golang.org/x/text@0.13.0: 2 known vulnerabilities
    GO-2026-5970, GO-2026-6629
    agents/drivers/nebula-go/go.mod
  • low
    golang.org/x/text@0.22.0: 2 known vulnerabilities
    GO-2026-5970, GO-2026-6629
    agents/drivers/oracle-go/go.mod
  • low
    github.com/rabbitmq/amqp091-go@1.13.0: 1 known vulnerability
    GO-2026-6700
    agents/drivers/rabbitmq/go.mod
  • low
    golang.org/x/crypto@0.57.0: 1 known vulnerability
    GO-2026-5932
    agents/drivers/rocketmq/go.mod
  • low
    golang.org/x/net@0.60.0: 2 known vulnerabilities
    GO-2026-6860, GO-2026-6866
    agents/drivers/rocketmq/go.mod
  • low
    paste@1.0.15: 1 known vulnerability
    RUSTSEC-2024-0436
    agents/drivers/tdengine/Cargo.lock
  • low
    scc@2.4.0: 1 known vulnerability
    RUSTSEC-2026-0205
    agents/drivers/tdengine/Cargo.lock
  • low
    esbuild@0.28.0: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    docs/pnpm-lock.yaml
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    pnpm-lock.yaml
  • low
    glob@11.1.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    vue@2.7.16: 1 known vulnerability
    GHSA-5j4c-8p2g-v4jx
    pnpm-lock.yaml
  • low
    rustls@0.23.45: 4 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    scripts/ai-proxy-12277/Cargo.lock
  • low
    rustls-webpki@0.103.15: 1 known vulnerability
    RUSTSEC-2026-0382
    scripts/ai-proxy-12277/Cargo.lock
  • low
    tokio@1.53.2: 1 known vulnerability
    RUSTSEC-2026-0386
    scripts/ai-proxy-12277/Cargo.lock
  • low
    adler@1.0.2: 1 known vulnerability
    RUSTSEC-2025-0056
    vendor/rumqttc/Cargo.lock
  • low
    atty@0.2.14: 2 known vulnerabilities
    RUSTSEC-2021-0145, RUSTSEC-2024-0375
    vendor/rumqttc/Cargo.lock
  • low
    bincode@1.3.3: 1 known vulnerability
    RUSTSEC-2025-0141
    vendor/rumqttc/Cargo.lock
  • low
    bytes@1.5.0: 1 known vulnerability
    RUSTSEC-2026-0007
    vendor/rumqttc/Cargo.lock
  • low
    idna@0.5.0: 1 known vulnerability
    RUSTSEC-2024-0421
    vendor/rumqttc/Cargo.lock
  • low
    rand@0.8.5: 2 known vulnerabilities
    RUSTSEC-2026-0097, RUSTSEC-2026-0097
    vendor/rumqttc/Cargo.lock
  • low
    ring@0.17.8: 1 known vulnerability
    RUSTSEC-2025-0009
    vendor/rumqttc/Cargo.lock
  • low
    rustls-pemfile@2.1.0: 1 known vulnerability
    RUSTSEC-2025-0134
    vendor/rumqttc/Cargo.lock
  • low
    tokio@1.36.0: 2 known vulnerabilities
    RUSTSEC-2025-0023, RUSTSEC-2026-0386
    vendor/rumqttc/Cargo.lock
  • low
    anyhow@1.0.98: 1 known vulnerability
    RUSTSEC-2026-0190
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    fxhash@0.2.1: 1 known vulnerability
    RUSTSEC-2025-0057
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    rand@0.7.3: 1 known vulnerability
    RUSTSEC-2026-0097
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    rustls@0.23.28: 4 known vulnerabilities
    RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    serde_with@3.12.0: 1 known vulnerability
    GHSA-7gcf-g7xr-8hxj
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    tar@0.4.45: 1 known vulnerability
    GHSA-3pv8-6f4r-ffg2
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    time@0.3.41: 1 known vulnerability
    RUSTSEC-2026-0009
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    tokio@1.44.2: 1 known vulnerability
    RUSTSEC-2026-0386
    vendor/tauri-plugin-updater/Cargo.lock
  • low
    webpki-root-certs@1.0.5: 1 known vulnerability
    RUSTSEC-2026-0383
    vendor/tauri-plugin-updater/Cargo.lock

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Dbx alternatives

View more →

Similar mcp servers in Database Management, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Dbx (this page)
t8y2
28kApache-2.0Nov 1, 2026Scanned, no flagged issues
Codebase Memory MCP
DeusData
48kMITNov 1, 2026Scanned, see report
Xerj
xerj-org
19kApache-2.0Nov 1, 2026Scanned, no flagged issues
MCP Toolbox
googleapis
17kApache-2.0Nov 1, 2026Scanned, no flagged issues
Nightingale
ccfos
13kApache-2.0Oct 30, 2026Scanned, no flagged issues
Dbhub
bytebase
3.8kMITOct 26, 2026Scanned, no flagged issues