github Python re-analysis due

Cloto-dev/CPersona

v2.5.11
github

CPersona — persistent memory for AI agents over MCP. One SQLite file you own, hybrid vector + full-text + keyword search, no LLM in the loop, and honest reporting when recall degrades. MIT licensed.

maintainer
Cloto-dev
licence
MIT
first seen
2026-07-19
last seen
2026-09-15
releases · 30d
51
short id

Cloto-dev/CPersona is an MCP server distributed on github, maintained by Cloto-dev, tracked here since July 2026. It has shipped 106 releases (currently 2.5.11) and exposes 2 tools. Tools include think, think_with_tools. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict. 1 known CVE on file.

what we found

1 advisory published against this server still applies to the version it ships, the most severe rated high, most recently 2026-07-30.

Its 2 tools appear to reach filesystem, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-15: 2 tools added and 29 tools removed.

full security breakdown →
tools 2
  • think
  • think_with_tools
release cadence · 90d 104 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
2.6.0a1 2026-09-15 pypi
v2.5.12b4 2026-09-12 github
2.5.12b4 2026-09-12 pypi
v2.5.12b3 2026-09-07 github
2.5.12b3 2026-09-07 pypi
v2.5.12b2 2026-09-07 github
2.5.12b2 2026-09-07 pypi
v2.5.12b1 2026-09-05 github
2.5.12b1 2026-09-05 pypi
v2.5.12a3 2026-09-05 github

view all →