npm/@jsonbored/gittensory-mcp: medium 6.5

Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-382c-vx95-w3p5
• https://github.com/JSONbored/gittensory/security/advisories/GHSA-382c-vx95-w3p5
• https://github.com/JSONbored/gittensory/commit/811ef5fb9d748170011f8854d88c64627ad666a0
• https://github.com/JSONbored/gittensory

published 2026-07-09T13:44:51Z · modified 2026-07-09T14:00:37.476741418Z · JSON