Skip to content

Add MseeP.ai badge#25

Open
mseep-ai wants to merge 1 commit intounmodeled-tyler:mainfrom
mseep-ai:add-mseep-badge
Open

Add MseeP.ai badge#25
mseep-ai wants to merge 1 commit intounmodeled-tyler:mainfrom
mseep-ai:add-mseep-badge

Conversation

@mseep-ai
Copy link
Copy Markdown

Hi there,

This pull request shares a security update on vessel-browser.

We also have an entry for vessel-browser in our directory, MseeP.ai, where we provide regular security and trust updates on your app.

We invite you to add our badge for your MCP server to your README to help your users learn from a third party that provides ongoing validation of vessel-browser.

You can easily take control over your listing for free: visit it at https://mseep.ai/app/unmodeled-tyler-vessel-browser.

Thanks,

The MseeP Team
MCP servers you can trust


MseeP.ai Security Assessment Badge

Here are our latest evaluation results of vessel-browser

Security Scan Results

Security Score: 73/100

Risk Level: moderate

Scan Date: 2026-04-22

Score starts at 100, deducts points for security issues, and adds points for security best practices

Detected Vulnerabilities

Medium Severity

  • @hono/node-server

    • [{'source': 1116281, 'name': '@hono/node-server', 'dependency': '@hono/node-server', 'title': '@hono/node-server: Middleware bypass via repeated slashes in serveStatic', 'url': 'https://github.com/advisories/GHSA-92pp-h63x-v22m', 'severity': 'moderate', 'cwe': ['CWE-22'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}, 'range': '<1.19.13'}]
    • Fixed in version: unknown
  • @anthropic-ai/sdk

    • [{'source': 1115784, 'name': '@anthropic-ai/sdk', 'dependency': '@anthropic-ai/sdk', 'title': 'Claude SDK for TypeScript: Memory Tool Path Validation Allows Sandbox Escape to Sibling Directories', 'url': 'https://github.com/advisories/GHSA-5474-4w2j-mq4c', 'severity': 'moderate', 'cwe': ['CWE-22', 'CWE-41'], 'cvss': {'score': 0, 'vectorString': None}, 'range': '>=0.79.0 <0.81.0'}]
    • Fixed in version: unknown
  • dompurify

    • [{'source': 1116663, 'name': 'dompurify', 'dependency': 'dompurify', 'title': "DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation", 'url': 'https://github.com/advisories/GHSA-39q2-94rc-95cp', 'severity': 'moderate', 'cwe': ['CWE-783'], 'cvss': {'score': 0, 'vectorString': None}, 'range': '<=3.3.3'}]
    • Fixed in version: unknown
  • ... and 5 more medium severity vulnerabilities

Security Findings

Medium Severity Issues

  • semgrep: Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections.
    • Location: hf-space/entrypoint.sh
    • Line: 34

This security assessment was conducted by MseeP.ai, an independent security validation service for MCP servers. Visit our website to learn more about our security reviews.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant