npm/@cardano402/mcp-server: unknown 0
@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url
Action: Upgrade @cardano402/mcp-server to 0.1.2 or later.
npm i @cardano402/mcp-server@0.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.2 | - |
Fixed versions
| 0.1.2 |
Sources
- osv: GHSA-rp72-5v5q-2446
- https://github.com/MorganOnCode/cardano402/security/advisories/GHSA-rp72-5v5q-2446
- https://github.com/MorganOnCode/cardano402
published · modified · JSON