poly-db-mcp

The PostgreSQL adapter (pg_query, pg_select, pg_insert, pg_update, pg_delete, pg_json_query, pg_create_table) uses `conn.unsafe(query)` directly with user-provided string inputs without apparent sanitization. This is a critical SQL injection vulnerability. While other adapters generally use parameterized queries or client SDKs (which are safer), this single direct injection point significantly compromises the server's security if interacting with PostgreSQL via untrusted input. Deno's broad permissions (--allow-net, --allow-read, --allow-write, --allow-env, --unstable-kv) are necessary but also mean a vulnerability can have wider impact. Hardcoded default credentials for some databases are present but are intended to be overridden by environment variables.