Three Critical MCP Database Server Flaws Found. Alibaba Won't Patch.

Akamai criticizes Apache Doris / Shared entities / Shared topic / What happened next

Akamai found three database-MCP flaw classes, and Alibaba declined to patch one.

Linked by a graph relationship (Akamai criticizes Apache Doris); both cover Alibaba, Apache Pinot, MCP, SQL; overlapping topics (alibaba, apache, database, flaw, server).

MCP server sprawl is now the dominant agent supply-chain risk: 12,520 exposed services, ~40% with no auth.

Linked by a graph relationship (Akamai criticizes Apache Doris); both cover MCP, SQL; overlapping topics (agent, alibaba, apache, dori, server).

Alibaba criticizes Anthropic / Shared entities / Shared topic / Earlier coverage / Tension

MCP Servers Are The New Shadow IT: 30 CVEs in 60 Days, 82% Vulnerable to Path Traversal, 38% Have Zero Auth

Linked by a graph relationship (Alibaba criticizes Anthropic); both cover Audit, MCP; overlapping topics (found, full, have, server).

Akamai criticizes Apache Doris / Shared entities / Shared topic / What happened next

The MCP supply chain has a hole in the floor, and it's being exploited right now

Linked by a graph relationship (Akamai criticizes Apache Doris); both cover Audit, MCP; overlapping topics (agent, execution, flaw, server).

Snyk supports MCP / Shared entities / Shared topic / Earlier coverage

The Agent Security Crisis Is Here: 36% of ClawHub Skills Malicious, 30+ MCP CVEs, RCE in Microsoft Agent Framework

Linked by a graph relationship (Snyk supports MCP); both cover Audit, MCP; overlapping topics (agent, audit, critical, have).

Cursor uses MCP / Shared entities / Shared topic / What happened next / Tension

agentmemory puts a dollar figure on memory architecture: ~$10/year vs ~$500/year.

Linked by a graph relationship (Cursor uses MCP); both cover Apache, MCP; overlapping topics (agent, database).

Apache Pinot supports OAuth / Shared entities / Shared topic / What happened next

holaOS runs Claude Code and Codex side by side on shared local-first memory at 6,922 stars.

Linked by a graph relationship (Apache Pinot supports OAuth); both cover Apache, MCP; overlapping topics (agent, apache, database).

MCP governance shipped in three unrelated categories in one week, and the chokepoint is now obvious

Linked by a graph relationship (Apache Pinot supports OAuth); both cover MCP, SQL; overlapping topics (audit, execution, server).