@aborruso/ckan-mcp-server 0.4.127 → 0.4.128

package/LOG.md

@@ -1,5 +1,15 @@
 # LOG
 
+## 2026-09-28
+
+### v0.4.128
+
+Ships #556: every redirect hop in `makeCkanRequest` is re-validated (GHSA-279h-fmcr-4rwv), on both the Node/axios and Workers/fetch paths. Smoke 17/17.
+
+### Security: validate every redirect hop in `makeCkanRequest` (GHSA-279h-fmcr-4rwv)
+
+`makeCkanRequest` followed up to 5 redirects via axios without re-validating the target. The SSRF-safe agent `lookup` is skipped by Node for IP literals, so a public URL 302-ing to `http://127.0.0.1/` or `169.254.169.254` was followed, and an internal endpoint answering `success: true` was returned in full (reproduced end-to-end via httpbin `redirect-to`). Fix: axios `beforeRedirect` calls `validateServerUrl` on each hop; the Workers `fetch` branch now uses `safeFetch` (`maxHops: 5`). Side effect: `CKAN_ALLOWED_DOMAINS` now applies to redirect targets too, so a portal redirecting to another host needs both listed. The public Worker (no allowlist) is unaffected for public portals.
+
 ## 2026-09-24
 
 ### v0.4.127

package/dist/index.js

@@ -945,6 +945,12 @@ async function makeCkanRequest(serverUrl, action, params = {}, opts = {}) {
         timeout: 3e4,
         responseType: "arraybuffer",
         maxRedirects: 5,
+        // Re-validate every redirect hop: Node skips the agent's `lookup` for IP
+        // literals, so a public host 302-ing to e.g. 169.254.169.254 would otherwise
+        // be followed. Also enforces CKAN_ALLOWED_DOMAINS on redirect targets.
+        beforeRedirect: (redirectOptions) => {
+          validateServerUrl(redirectOptions.href);
+        },
         // Never route through HTTP_PROXY/HTTPS_PROXY: a proxy would connect to the
         // target itself, bypassing the SSRF-safe lookup pinned in the agents below.
         proxy: false,
@@ -979,7 +985,7 @@ async function makeCkanRequest(serverUrl, action, params = {}, opts = {}) {
       const timeoutId = setTimeout(() => controller.abort(), 3e4);
       let response;
       try {
-        response = await fetch(fetchUrl, {
+        response = await safeFetch(fetchUrl, {
           method: "GET",
           signal: controller.signal,
           headers: {
@@ -987,7 +993,7 @@ async function makeCkanRequest(serverUrl, action, params = {}, opts = {}) {
             "Accept-Encoding": "identity",
             "User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
           }
-        });
+        }, { maxHops: 5 });
       } finally {
         clearTimeout(timeoutId);
       }
@@ -6042,7 +6048,7 @@ var registerAllPrompts = (server) => {
 function createServer() {
   return new McpServer({
     name: "ckan-mcp-server",
-    version: "0.4.127"
+    version: "0.4.128"
   });
 }
 function registerAll(server) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aborruso/ckan-mcp-server",
-  "version": "0.4.127",
+  "version": "0.4.128",
   "mcpName": "io.github.aborruso/ckan-mcp-server",
   "description": "MCP server for interacting with CKAN open data portals",
   "repository": {