Search results

[Security] MCP-07: Private Key Stored as Immutable String Without Zeroization

Status: Open.

#8 In asterdex/aster-mcp;

· mefai-dev opened on Mar 20, 2026

[Security] MCP-06: Config Directory Created Without Explicit Permissions

Status: Open.

#7 In asterdex/aster-mcp;

· mefai-dev opened on Mar 20, 2026

[Security] MCP-05: Error Messages Propagate Raw Internal Details

Status: Open.

#6 In asterdex/aster-mcp;

· mefai-dev opened on Mar 20, 2026

[Security] MCP-04: No Input Validation on account_id - Account Existence Leakage

Status: Open.

#5 In asterdex/aster-mcp;

· mefai-dev opened on Mar 20, 2026

[Security] MCP-03: Floating-Point Precision Loss in HMAC Client Order Quantities

Status: Open.

#4 In asterdex/aster-mcp;

· mefai-dev opened on Mar 20, 2026

[Security] MCP-02: base_url Accepts Arbitrary URLs - SSRF via Configuration

Status: Open.

#3 In asterdex/aster-mcp;

· mefai-dev opened on Mar 20, 2026

[Security] MCP-01: No MCP Authentication on SSE/HTTP Transport

Status: Open.

#2 In asterdex/aster-mcp;

· mefai-dev opened on Mar 20, 2026