PyPI/ogham-mcp: medium
ogham-mcp had credentials embedded in published PyPI sdists -- Neon postgres URLs and Voyage API key
Action: Upgrade ogham-mcp to 0.11.1 or later.
pip install ogham-mcp==0.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.6.3 | 0.11.1 | - |
Fixed versions
| 0.11.1 |
Sources
- osv: GHSA-8pqq-224h-x875
- https://github.com/ogham-mcp/ogham-mcp/security/advisories/GHSA-8pqq-224h-x875
- https://github.com/ogham-mcp/ogham-mcp
published · modified · JSON