agentic-mcp

Security check static checks

40 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked 24 Oct 2026 by edna-skill-static-v1 master@f01756dfcc56. What it checks

• Critical When Vitest UI server is listening, arbitrary file can be read and executed (affects vitest 4.0.17, pinned in package-lock.json).
• High @isaacs/brace-expansion has Uncontrolled Resource Consumption (affects @isaacs/brace-expansion 5.0.0, pinned in package-lock.json).
• High body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body (affects body-parser 2.3.0, pinned in package-lock.json).
• High brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups (affects brace-expansion 1.1.12, pinned in package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion (affects brace-expansion 1.1.12, pinned in package-lock.json).
• High brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash (affects brace-expansion 1.1.12, pinned in package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion (affects brace-expansion 1.1.12, pinned in package-lock.json).
• High brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (affects brace-expansion 1.1.12, pinned in package-lock.json).
• High brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups (affects brace-expansion 2.0.2, pinned in package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion (affects brace-expansion 2.0.2, pinned in package-lock.json).
• High brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash (affects brace-expansion 2.0.2, pinned in package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion (affects brace-expansion 2.0.2, pinned in package-lock.json).
• High brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (affects brace-expansion 2.0.2, pinned in package-lock.json).
• High flatted vulnerable to unbounded recursion DoS in parse() revive phase (affects flatted 3.3.3, pinned in package-lock.json).
• High Prototype Pollution via parse() in NodeJS flatted (affects flatted 3.3.3, pinned in package-lock.json).
• High js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources (affects js-yaml 4.1.1, pinned in package-lock.json).
• High js-yaml: YAML merge-key chains can force quadratic CPU consumption (affects js-yaml 4.1.1, pinned in package-lock.json).
• High JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported (affects js-yaml 4.1.1, pinned in package-lock.json).
• High minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions (affects minimatch 10.1.1, pinned in package-lock.json).
• High minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern (affects minimatch 10.1.1, pinned in package-lock.json).
• High minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments (affects minimatch 10.1.1, pinned in package-lock.json).
• High minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions (affects minimatch 3.1.2, pinned in package-lock.json).
• High minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern (affects minimatch 3.1.2, pinned in package-lock.json).
• High minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments (affects minimatch 3.1.2, pinned in package-lock.json).
• High minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions (affects minimatch 9.0.3, pinned in package-lock.json).
• High minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern (affects minimatch 9.0.3, pinned in package-lock.json).
• High minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments (affects minimatch 9.0.3, pinned in package-lock.json).
• High minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions (affects minimatch 9.0.5, pinned in package-lock.json).
• High minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern (affects minimatch 9.0.5, pinned in package-lock.json).
• High minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments (affects minimatch 9.0.5, pinned in package-lock.json).
• High nanoid: non-secure generators can loop indefinitely with negative size (affects nanoid 3.3.11, pinned in package-lock.json).
• High nanoid: custom generators can loop indefinitely when size is zero (affects nanoid 3.3.11, pinned in package-lock.json).
• High nanoid: Integer Overflow or Wraparound (affects nanoid 3.3.11, pinned in package-lock.json).
• High Picomatch has a ReDoS vulnerability via extglob quantifiers (affects picomatch 2.3.1, pinned in package-lock.json).
• High Picomatch has a ReDoS vulnerability via extglob quantifiers (affects picomatch 4.0.3, pinned in package-lock.json).
• High PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments (affects postcss 8.5.6, pinned in package-lock.json).
• High PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure (affects postcss 8.5.6, pinned in package-lock.json).
• High Rollup 4 has Arbitrary File Write via Path Traversal (affects rollup 4.55.1, pinned in package-lock.json).
• High source-map-js allows event-loop denial of service through indexed source-map section offsets (affects source-map-js 1.2.1, pinned in package-lock.json).
• High launch-editor: `fs.existsSync()` existence check can be bypassed on Windows (affects vite 7.3.1, pinned in package-lock.json).
• High vite: `server.fs.deny` bypass on Windows alternate paths (affects vite 7.3.1, pinned in package-lock.json).
• High Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket (affects vite 7.3.1, pinned in package-lock.json).
• High Vite: `server.fs.deny` bypassed with queries (affects vite 7.3.1, pinned in package-lock.json).
• High Zod can exhaust memory while validating oversized constrained collections (affects zod 4.3.5, pinned in package-lock.json).
• Medium Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock (affects @vitest/mocker 4.0.17, pinned in package-lock.json).
• Medium Vitest: Code injection via unauthenticated manual mock registration (affects @vitest/mocker 4.0.17, pinned in package-lock.json).
• Medium brace-expansion: Zero-step sequence causes process hang and memory exhaustion (affects brace-expansion 1.1.12, pinned in package-lock.json).
• Medium brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service (affects brace-expansion 1.1.12, pinned in package-lock.json).
• Medium brace-expansion: Zero-step sequence causes process hang and memory exhaustion (affects brace-expansion 2.0.2, pinned in package-lock.json).
• Medium brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service (affects brace-expansion 2.0.2, pinned in package-lock.json).
• Medium JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases (affects js-yaml 4.1.1, pinned in package-lock.json).
• Medium Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching (affects picomatch 2.3.1, pinned in package-lock.json).
• Medium Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching (affects picomatch 4.0.3, pinned in package-lock.json).
• Medium PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset (affects postcss 8.5.6, pinned in package-lock.json).
• Medium PostCSS has XSS via Unescaped </style> in its CSS Stringify Output (affects postcss 8.5.6, pinned in package-lock.json).
• Medium Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling (affects vite 7.3.1, pinned in package-lock.json).
• Medium launch-editor: escapeCmdArgs() omits % escaping on Windows (affects vite 7.3.1, pinned in package-lock.json).
• Medium launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors (affects vite 7.3.1, pinned in package-lock.json).
• Medium Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine (affects vite 7.3.1, pinned in package-lock.json).
• Medium launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows (affects vite 7.3.1, pinned in package-lock.json).
• Medium Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock (affects vitest 4.0.17, pinned in package-lock.json).
• Low jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch (affects diff 5.2.0, pinned in package-lock.json).
• Low Vite: Cross origin script execution through Vite custom middleware (affects vite 7.3.1, pinned in package-lock.json).
• Note 1 of 361 packages are not pinned to one version, so only the malicious packages list was checked for them, not version advisories.