npm/kozou: high
Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding, request-body limits, read-only reads, default network exposure)
Action: Upgrade kozou to 1.8.1 or later.
npm i kozou@1.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.1 | - |
Fixed versions
| 1.8.1 |
Sources
- osv: GHSA-v52w-28xh-v562
- https://github.com/kozou-dev/kozou/security/advisories/GHSA-v52w-28xh-v562
- https://github.com/kozou-dev/kozou
published · modified · JSON