Code Injection Vulnerability in Amazon awslabs.dynamodb-mcp-server
Amazon awslabs.dynamodb-mcp-server versions 2.0.10 through 2.1.5 contain a code injection flaw in the CDK generator component. Attackers could execute arbitrary code by crafting malicious table, index, or attribute names in data model files. If you're using affected versions, update immediately—this requires your action.
source: [aws/security-bulletin]