Capability drift in willow-memory/willow-mcp

github willow-memory/willow-mcp D

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

maintainer: willow-memory
tools: 154
CVEs: 0
releases: 143

advisory #862293

HIGH willow-memory/willow-mcp 09-03 09:44

code analysis flagged dynamic code execution in willow-memory/willow-mcp

current permission surface (inferred):

drift timeline for willow-memory/willow-mcp → security tab →

drift history for this server newest 8

HIGH 09-12 05:21 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-11 20:49 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-11 17:13 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-11 16:26 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-11 10:34 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-11 10:25 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-11 10:20 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-11 09:39 code analysis flagged dynamic code execution in willow-memory/willow-mcp

Each entry is one capability capture differing from the one before it — a review signal, not a verdict.