Add affected range to GHSA-mvq4-39wx-6h5g (mysql-mcp-server)

[faketut]

Improves GHSA-mvq4-39wx-6h5g (CVE-2026-11529).

Change

Populate the empty affected block with the PyPI package and patched version.

"affected": [
  {
    "package": {
      "ecosystem": "PyPI",
      "name": "mysql-mcp-server"
    },
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          { "introduced": "0" },
          { "fixed": "0.3.0" }
        ]
      }
    ]
  }
]

Sources

All evidence is already present in the advisory references:

• Vulnerable details: "A vulnerability was determined in designcomputer mysql-mcp-server up to 0.2.2 … Upgrading to version 0.3.0 is sufficient to resolve this issue."
• Fix commit: designcomputer/mysql_mcp_server@080bef9
• Fix PR: feat: 添加多个新文件并改进功能 designcomputer/mysql_mcp_server#86
• Release tag: https://github.com/designcomputer/mysql_mcp_server/releases/tag/v0.3.0
• PyPI distribution: https://pypi.org/project/mysql-mcp-server/0.3.0/ (package name matches the GitHub repo)
• CWE-74 / SQL injection in read_resource of src/mysql_mcp_server/server.py

JSON validated with python3 -m json.tool.