HIGH8.4npm
GHSA-49mq-fc6q-3h46· CVE-2026-55157Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
Modified: 8/14/2026
package
npm/@ooples/token-optimizer-mcp
pkg:npm/%40ooples/token-optimizer-mcp
MEDIUM5.3npm
GHSA-76pc-mqxp-3rq5· CVE-2026-55156Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints
Modified: 8/14/2026