MCP Observatory
1m ago Tracked 55,290 Last 1m ago 24h 3,023

Capability drift in casdoor/casdoor

github casdoor/casdoor C

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

maintainer
casdoor
tools
0
CVEs
0
releases
231
advisory #439016
HIGH casdoor/casdoor

code analysis flagged committed secret, dynamic code execution in casdoor/casdoor

current permission surface (inferred):

drift timeline for casdoor/casdoor → security tab →

drift history for this server newest 8
  1. HIGH code analysis flagged committed secret in casdoor/casdoor
  2. HIGH code analysis flagged committed secret in casdoor/casdoor
  3. HIGH code analysis flagged committed secret in casdoor/casdoor
  4. HIGH code analysis flagged committed secret in casdoor/casdoor
  5. HIGH code analysis flagged committed secret in casdoor/casdoor
  6. HIGH code analysis flagged committed secret in casdoor/casdoor
  7. HIGH code analysis flagged committed secret in casdoor/casdoor
  8. HIGH code analysis flagged committed secret in casdoor/casdoor

Each entry is one capability capture differing from the one before it — a review signal, not a verdict.