stata-mcp
python · stata-mcpCritical
stata-mcp: Command injection via log_file_name parameter
The `log_file_name` parameter in `stata_do` API and CLI is directly interpolated into a Stata command string without sanitization,
09 Jun 2026 · act now