Bug hunter tracks down three massive MCP flaws and one vendor won't fix theirs (opens in new tab)

Discussed on r/mcp

Apache, Alibaba databases vulnerable and only one has a patch