Capability drift in cognis-digital/mcpscan

github cognis-digital/mcpscan C

Scan MCP servers for RCE/SSRF/no-auth/tool-poisoning vulnerabilities

maintainer: cognis-digital
tools: 13
CVEs: 0
releases: 0

advisory #650085

HIGH cognis-digital/mcpscan 08-08 23:59

code analysis flagged committed secret ×2 in cognis-digital/mcpscan

current permission surface (inferred):

drift timeline for cognis-digital/mcpscan → security tab →

drift history for this server 7 recorded

HIGH 08-19 13:55 code analysis flagged committed secret ×2, dynamic code execution ×2 in cognis-digital/mcpscan
HIGH 08-08 23:59 code analysis flagged committed secret ×2 in cognis-digital/mcpscan you are here
HIGH 07-10 11:06 code analysis flagged dynamic code execution in cognis-digital/mcpscan
HIGH 07-06 12:09 code analysis flagged dynamic code execution ×2 in cognis-digital/mcpscan
HIGH 07-02 22:15 code analysis flagged committed secret, dynamic code execution ×2 in cognis-digital/mcpscan
HIGH 06-29 07:27 code analysis flagged committed secret, dynamic code execution ×2 in cognis-digital/mcpscan
HIGH 06-24 20:58 code analysis flagged committed secret, dynamic code execution ×2 in cognis-digital/mcpscan

This server has drifted again since this advisory — a dated claim is a snapshot, not a current state.