Skip to content
OpenAdvisories

Package · npm

@cardano402/mcp-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • None 0.0
    GHSA-rp72-5v5q-2446

    @cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url

    ## Summary `@cardano402/mcp-server` versions `<= 0.1.1` ship three security gaps that can lead to unauthorized fund movement when the package is used as designed (an MCP server exposing Cardano payment tools to an ## Impact ### 1. No spending limits on signed…

    @cardano402/mcp-server npm