librarium

Security check static checks

37 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked 24 Oct 2026 by edna-skill-static-v1 main@2137a9a42c06. What it checks

• Critical proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet (affects proxy-addr 2.0.7, pinned in package-lock.json).
• High MCP TypeScript SDK: Experimental tasks were not tied to the session that created them (affects @modelcontextprotocol/sdk 1.30.0, pinned in package-lock.json).
• High MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation (affects @modelcontextprotocol/sdk 1.30.0, pinned in package-lock.json).
• High MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server (affects @modelcontextprotocol/sdk 1.30.0, pinned in package-lock.json).
• High body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body (affects body-parser 2.3.0, pinned in package-lock.json).
• High sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 (affects sharp 0.35.2, pinned in package-lock.json).
• High sharp : Vulnerability in librsvg dependency CVE-2026-96889 (affects sharp 0.35.2, pinned in package-lock.json).
• High source-map-js allows event-loop denial of service through indexed source-map section offsets (affects source-map-js 1.2.1, pinned in package-lock.json).
• High undici vulnerable to Denial of Service via unrequested WebSocket subprotocol (affects undici 7.29.0, pinned in package-lock.json).
• High undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool (affects undici 7.29.0, pinned in package-lock.json).
• High undici vulnerable to Denial of Service via unhandled error on excessive content-encodings (affects undici 7.29.0, pinned in package-lock.json).
• High launch-editor: `fs.existsSync()` existence check can be bypassed on Windows (affects vite 8.2.1, pinned in package-lock.json).
• High Zod can exhaust memory while validating oversized constrained collections (affects zod 4.4.3, pinned in package-lock.json).
• Medium MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies (affects @modelcontextprotocol/sdk 1.30.0, pinned in package-lock.json).
• Medium MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service (affects @modelcontextprotocol/sdk 1.30.0, pinned in package-lock.json).
• Medium Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock (affects @vitest/mocker 4.1.10, pinned in package-lock.json).
• Medium Vitest: Code injection via unauthenticated manual mock registration (affects @vitest/mocker 4.1.10, pinned in package-lock.json).
• Medium fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets (affects fast-uri 3.1.7, pinned in package-lock.json).
• Medium fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding (affects fast-uri 3.1.7, pinned in package-lock.json).
• Medium fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization (affects fast-uri 3.1.7, pinned in package-lock.json).
• Medium Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths (affects hono 4.13.1, pinned in package-lock.json).
• Medium Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials (affects hono 4.13.1, pinned in package-lock.json).
• Medium Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion (affects hono 4.13.1, pinned in package-lock.json).
• Medium Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory (affects hono 4.13.1, pinned in package-lock.json).
• Medium hono/jsx renders plain strings unescaped in boundary components, leading to XSS (affects hono 4.13.1, pinned in package-lock.json).
• Medium ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass (affects ip-address 10.5.0, pinned in package-lock.json).
• Medium ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process (affects ip-address 10.5.0, pinned in package-lock.json).
• Medium ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range (affects ip-address 10.5.0, pinned in package-lock.json).
• Medium ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts (affects ip-address 10.5.0, pinned in package-lock.json).
• Medium ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process (affects ip-address 10.5.0, pinned in package-lock.json).
• Medium undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches (affects undici 7.29.0, pinned in package-lock.json).
• Medium undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression (affects undici 7.29.0, pinned in package-lock.json).
• Medium undici vulnerable to Denial of Service via unbounded decompression of compressed responses (affects undici 7.29.0, pinned in package-lock.json).
• Medium undici vulnerable to Denial of Service via unbounded memory in the EventSource parser (affects undici 7.29.0, pinned in package-lock.json).
• Medium undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens (affects undici 7.29.0, pinned in package-lock.json).
• Medium undici vulnerable to Denial of Service via orphaned RetryHandler response body (affects undici 7.29.0, pinned in package-lock.json).
• Medium undici vulnerable to Denial of Service via WebSocketStream unclean close (affects undici 7.29.0, pinned in package-lock.json).
• Medium launch-editor: escapeCmdArgs() omits % escaping on Windows (affects vite 8.2.1, pinned in package-lock.json).
• Medium launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors (affects vite 8.2.1, pinned in package-lock.json).
• Medium Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine (affects vite 8.2.1, pinned in package-lock.json).
• Medium Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance` (affects vite 8.2.1, pinned in package-lock.json).
• Medium Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock (affects vitest 4.1.10, pinned in package-lock.json).
• Low fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references (affects fast-uri 3.1.7, pinned in package-lock.json).
• Low fast-uri vulnerable to improper path equivalence in relative reference normalization (affects fast-uri 3.1.7, pinned in package-lock.json).
• Low undici vulnerable to response truncation via oversized chunked responses in the dump interceptor (affects undici 7.29.0, pinned in package-lock.json).
• Low undici vulnerable to caching and replay of unsafe HTTP method responses (affects undici 7.29.0, pinned in package-lock.json).
• Low undici vulnerable to downstream response splitting via retry interceptor (affects undici 7.29.0, pinned in package-lock.json).
• Low Vite: Cross origin script execution through Vite custom middleware (affects vite 8.2.1, pinned in package-lock.json).
• Low Downloads code and runs it straight away (a well-known installer), host raw.githubusercontent.com: scripts/install.sh, line 5.
• Note 219 files were not read (over 512 KB, or past the 60 file cap): src/node-request-preflight.ts, src/node-run-artifact-codecs.ts, src/node-run-artifact-presentation.ts and more.
• Note 3 of 399 packages are not pinned to one version, so only the malicious packages list was checked for them, not version advisories.