@jsonbored/gittensory-mcp vulnerabilities

CVEs whose affected-version data names the @jsonbored/gittensory-mcp package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

GHSA-382c-vx95-w3p5Medium· 6.5

Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data

Gittensory: Missing contributor-scoped access control on profile endpoint and MCP tool leaks miner financial data

▾ Sunlitjsonbored · @jsonbored/gittensory-mcpvia GHSA

@jsonbored/gittensory-mcp vulnerabilities (CVEs) · VulnSea