TavernKeeper Scan Report

bmen25124/SillyTavern-MCP-Client

Commit 04fdfe4 Reviewed Aug 11, 2026

No material or immediate-danger concern was identified in this review.

This advisory report describes what the named tools and review process found at one exact commit. Unknown or unobserved behavior may still exist.

0 immediate danger 0 material 50 low

What this review found

No material or immediate-danger item was identified.

Minor cautions

Dependency advisory GHSA-2g4f-4pwh-qvx6:pkg:cad7e9fb17eb5405be0d1fe2 applies

Minor caution · high confidence

This is a known issue in a development tool, not in the extension itself. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-2g4f-4pwh-qvx6:pkg:cad7e9fb17eb5405be0d1fe2 to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to ajv@6.12.6, which is a transitive devDependency used by webpack's schema-utils during build time. No evidence indicates that the vulnerable code path is reachable at runtime in the SillyTavern extension's bundled output. The package is not imported by the project's production code.

Impact: low · Exploitability: unlikely

Developer action: Review and update development dependencies to resolve advisories. Update ajv to a patched version if possible.

Scanner: osv-scanner 2.4.0
Rule: GHSA-2g4f-4pwh-qvx6:pkg:cad7e9fb17eb5405be0d1fe2
File role: production
Source: package-lock.json

Dependency advisory GHSA-f886-m6hf-6m8v:pkg:db05cad6d25aec0390d39a8c applies

Minor caution · high confidence

This is a known issue in a development tool, not in the extension itself. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-f886-m6hf-6m8v:pkg:db05cad6d25aec0390d39a8c to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to brace-expansion@1.1.11, a transitive devDependency used by older versions of minimatch and related build tools. No runtime reachability in the final extension has been demonstrated; it is only used during development and build.

Impact: low · Exploitability: unlikely

Developer action: Review and update development dependencies to resolve advisories. Update brace-expansion and its parent packages to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-f886-m6hf-6m8v:pkg:db05cad6d25aec0390d39a8c
File role: production
Source: package-lock.json

Dependency advisory GHSA-5c6j-r48x-rmvq:pkg:9695ebfe7ac51867550b15ed applies

Minor caution · high confidence

This is a known issue in a development tool, not in the extension itself. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-5c6j-r48x-rmvq:pkg:9695ebfe7ac51867550b15ed to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to serialize-javascript@6.0.2, a transitive devDependency used by terser-webpack-plugin during build optimization. No evidence shows the vulnerable function is reachable in the extension's runtime context.

Impact: low · Exploitability: unlikely

Developer action: Review and update development dependencies to resolve advisories. Update serialize-javascript to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-5c6j-r48x-rmvq:pkg:9695ebfe7ac51867550b15ed
File role: production
Source: package-lock.json

Dependency advisory GHSA-c2c7-rcm5-vvqj:pkg:09f761f2e2a83fdc7890eb5a applies

Minor caution · high confidence

This is a known issue in a development tool, not in the extension itself. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-c2c7-rcm5-vvqj:pkg:09f761f2e2a83fdc7890eb5a to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to picomatch@2.3.1, a transitive devDependency used by many build tools (e.g., babel, jest). No runtime reachability in the extension's production code is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Review and update development dependencies to resolve advisories. Update picomatch to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-c2c7-rcm5-vvqj:pkg:09f761f2e2a83fdc7890eb5a
File role: production
Source: package-lock.json

Dependency advisory GHSA-23c5-xmqv-rm74:pkg:129158f1f423f49b12e76a97 applies

Minor caution · high confidence

This is a known issue in a development tool, not in the extension itself. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-23c5-xmqv-rm74:pkg:129158f1f423f49b12e76a97 to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to minimatch@5.1.6, a transitive devDependency used by packages such as jest and babel. No evidence shows the vulnerable code is executed in the extension's runtime.

Impact: low · Exploitability: unlikely

Developer action: Review and update development dependencies to resolve advisories. Update minimatch to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-23c5-xmqv-rm74:pkg:129158f1f423f49b12e76a97
File role: production
Source: package-lock.json

Dependency advisory GHSA-968p-4wvh-cqc8:pkg:3023221b39e02d9567361551 applies

Minor caution · high confidence

This is a known issue in a Babel helper library, likely used only during development. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-968p-4wvh-cqc8:pkg:3023221b39e02d9567361551 to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to @babel/runtime@7.26.0, which appears as a transitive dependency likely used only during development or by a devDependency. No evidence indicates it is bundled or used in the final extension's runtime code.

Impact: low · Exploitability: unlikely

Developer action: Review and update dependencies to resolve advisories. Ensure @babel/runtime is not included in the production bundle.

Scanner: osv-scanner 2.4.0
Rule: GHSA-968p-4wvh-cqc8:pkg:3023221b39e02d9567361551
File role: production
Source: package-lock.json

Dependency advisory GHSA-5p4m-2wfm-xmqj:pkg:854982e350d33df8baa91ad9 applies

Minor caution · high confidence

This is a known issue in a YAML parsing library used during development. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-5p4m-2wfm-xmqj:pkg:854982e350d33df8baa91ad9 to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to js-yaml@3.14.1, a transitive devDependency used by build and test tools (e.g., babel, jest). No evidence shows the vulnerable code is reachable at runtime in the extension.

Impact: low · Exploitability: unlikely

Developer action: Review and update development dependencies to resolve advisories. Update js-yaml to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-5p4m-2wfm-xmqj:pkg:854982e350d33df8baa91ad9
File role: production
Source: package-lock.json

Dependency advisory GHSA-3v7f-55p6-f55p:pkg:972939a004a2a625fbda61c7 applies

Minor caution · high confidence

This is a known issue in a development tool, not in the extension itself. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3v7f-55p6-f55p:pkg:972939a004a2a625fbda61c7 to a dependency declared by this repository.

Contextual assessment: This second advisory for picomatch@2.3.1 also applies to the same version used as a transitive devDependency. No runtime reachability is demonstrated.

Impact: low · Exploitability: unlikely

Developer action: Review and update dependencies to resolve advisories. Update picomatch to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3v7f-55p6-f55p:pkg:972939a004a2a625fbda61c7
File role: production
Source: package-lock.json

Dependency advisory GHSA-48c2-rrv3-qjmp:pkg:a2b2de1b67a6232727d04ad2 applies

Minor caution · high confidence

This is a known issue in a YAML library used only during development. It does not affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-48c2-rrv3-qjmp:pkg:a2b2de1b67a6232727d04ad2 to a dependency declared by this repository.

Contextual assessment: This npm advisory applies to yaml@1.10.2, which is listed as a devDependency (optional, peer) in the lockfile. No evidence indicates it is used in the production extension or that the vulnerable code path is reachable at runtime.

Impact: low · Exploitability: unlikely

Developer action: Review and update development dependencies to resolve advisories. Consider removing unused devDependencies.

Scanner: osv-scanner 2.4.0
Rule: GHSA-48c2-rrv3-qjmp:pkg:a2b2de1b67a6232727d04ad2
File role: production
Source: package-lock.json

Deterministic technical evidence (1)

JavaScript analysis reported javascript.xray.serialize-environment · javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1

This technical signal is not part of the shipped runtime behavior.

Policy reason: javascript-xray-inert-tooling · Execution scope: tooling-only

Source: webpack.config.cjs:5

Contextual expected matches (36)

Dependency advisory GHSA-xvcm-6775-5m9r:pkg:b7ba0ee562d2ff64d5428476 applies

Expected behavior · high confidence

This vulnerability is in a tool used only while building the extension, not while using it. It cannot affect your data or chat experience.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-xvcm-6775-5m9r:pkg:b7ba0ee562d2ff64d5428476 to a dependency declared by this repository.

Contextual assessment: immutable@5.0.3 is a transitive dev dependency resolved during build. The advisory GHSA-xvcm-6775-5m9r affects the npm package immutable, but within this extension it is only used during development and testing (via packages like webpack and babel). There is no runtime code path that loads this package in the shipped SillyTavern extension. The lockfile shows it is not a direct runtime dependency and is marked with dev: true in the context.

Impact: none · Exploitability: unlikely

Developer action: Update to a non-vulnerable version of immutable if upgrading the build chain; otherwise this has no user-facing impact.

Scanner: osv-scanner 2.4.0
Rule: GHSA-xvcm-6775-5m9r:pkg:b7ba0ee562d2ff64d5428476
File role: production
Source: package-lock.json

JavaScript analysis reported javascript.download-to-execution

Expected behavior · high confidence

This is a false alarm. The extension uses network connections to talk to MCP servers, and the generated code includes standard JavaScript helpers. The two don't actually connect in a dangerous way.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution in this repository.

Contextual assessment: The generated bundle contains network retrieval primitives (e.g., fetch) and dynamic code execution sinks (e.g., classes, Reflect.construct, regenerator-runtime) that are standard Babel transpilation output. There is no evidence that network-retrieved data is passed to any dynamic execution sink; the network calls are for connecting to MCP servers as part of the extension's intended function. The correlation is a static false positive.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.download-to-execution
File role: generated
Source: dist/index.js:1

Dependency advisory GHSA-v6h2-p8h4-qcjw:pkg:8274239beac709c34bbdd8ec applies

Expected behavior · high confidence

This is a minor issue in a testing tool. It does not pose any risk when using the MCP Client extension in SillyTavern.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v6h2-p8h4-qcjw:pkg:8274239beac709c34bbdd8ec to a dependency declared by this repository.

Contextual assessment: brace-expansion@2.0.1 is a transitive dependency of jest and other dev tools. The advisory GHSA-v6h2-p8h4-qcjw is a low-severity ReDoS (Regular Expression Denial of Service) in brace-expansion. This package is used only during test execution (jest) and not included in the runtime bundle of the extension. No attacker-controlled input reaches this package in the deployed extension.

Impact: none · Exploitability: unlikely

Developer action: Update brace-expansion to a patched version by updating jest or the affected dev dependency; no urgent action needed.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v6h2-p8h4-qcjw:pkg:8274239beac709c34bbdd8ec
File role: production
Source: package-lock.json

Dependency advisory GHSA-h67p-54hq-rp68:pkg:032a72735b89e8109ae31a3d applies

Expected behavior · high confidence

This vulnerability is in a library that processes YAML files during development. The extension does not process any YAML from users, so it cannot be exploited.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-h67p-54hq-rp68:pkg:032a72735b89e8109ae31a3d to a dependency declared by this repository.

Contextual assessment: js-yaml@3.14.1 is a transitive dev dependency used by @babel/core and other build tools. The advisory GHSA-h67p-54hq-rp68 relates to code injection via crafted YAML. This package is never loaded in the runtime SillyTavern extension; it is only used during build or testing. No attacker-controlled YAML input reaches this package in the shipped product.

Impact: none · Exploitability: unlikely

Developer action: Update js-yaml to a patched version by updating @babel/core or other devDependencies; low priority.

Scanner: osv-scanner 2.4.0
Rule: GHSA-h67p-54hq-rp68:pkg:032a72735b89e8109ae31a3d
File role: production
Source: package-lock.json

Dependency advisory GHSA-v6h2-p8h4-qcjw:pkg:954583494f7b71625ae8e6ee applies

Expected behavior · high confidence

This is a minor regular expression issue in a development tool. It does not affect the extension's function.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v6h2-p8h4-qcjw:pkg:954583494f7b71625ae8e6ee to a dependency declared by this repository.

Contextual assessment: brace-expansion@1.1.11 is a transitive dev dependency used by multiple packages including jest, babel, and webpack. The advisory GHSA-v6h2-p8h4-qcjw is a ReDoS vulnerability. It is not present in the runtime extension bundle and is only used during development and testing. No runtime attack surface exists.

Impact: none · Exploitability: unlikely

Developer action: Update to a patched version by updating devDependencies; not user-facing.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v6h2-p8h4-qcjw:pkg:954583494f7b71625ae8e6ee
File role: production
Source: package-lock.json

Dependency advisory GHSA-fv7c-fp4j-7gwp:pkg:61a326311e4c18e21c55bdee applies

Expected behavior · high confidence

This vulnerability is in a tool that compiles the extension's code during development. It cannot be triggered when the extension is running in SillyTavern.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-fv7c-fp4j-7gwp:pkg:61a326311e4c18e21c55bdee to a dependency declared by this repository.

Contextual assessment: @babel/plugin-transform-modules-systemjs@7.25.9 is a direct devDependency used during the build process to transpile modules. The advisory GHSA-fv7c-fp4j-7gwp is a high-severity vulnerability in Babel plugins related to arbitrary code execution during compilation. This package is never executed in the runtime environment; it is only used by the developer when running the build script. Users never interact with this code.

Impact: none · Exploitability: unlikely

Developer action: Update @babel/plugin-transform-modules-systemjs to a patched version; this is a build-time concern.

Scanner: osv-scanner 2.4.0
Rule: GHSA-fv7c-fp4j-7gwp:pkg:61a326311e4c18e21c55bdee
File role: production
Source: package-lock.json

Dependency advisory GHSA-38r7-794h-5758:pkg:939d3d37185299b5144d694f applies

Expected behavior · high confidence

This is a minor security issue in the bundler used to create the extension. It does not affect the extension's operation.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-38r7-794h-5758:pkg:939d3d37185299b5144d694f to a dependency declared by this repository.

Contextual assessment: webpack@5.97.1 is a devDependency used to bundle the extension. The advisory GHSA-38r7-794h-5758 is a low-severity vulnerability related to cross-realm object access in webpack. This package is only used during the build step and is not present in the runtime extension bundle. No attacker can exploit this in the deployed SillyTavern extension.

Impact: none · Exploitability: unlikely

Developer action: Update webpack to a patched version if available; low impact.

Scanner: osv-scanner 2.4.0
Rule: GHSA-38r7-794h-5758:pkg:939d3d37185299b5144d694f
File role: production
Source: package-lock.json

JavaScript analysis reported javascript.xray.prototype-pollution

Expected behavior · high confidence

Same as before: these are benign build tool patterns, not real security issues.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.prototype-pollution in this repository.

Contextual assessment: Same as group 1 candidate 7c92496a. The normalized source shows `__proto__` assignments in regenerator-runtime and standard Babel helpers. No actual prototype pollution risk.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.prototype-pollution
File role: generated
Source: dist/index.js:267

Dependency advisory GHSA-mh99-v99m-4gvg:pkg:30da7db405d2e49715cb0ed6 applies

Expected behavior · high confidence

Another instance of the same minor issue in a development tool. No user risk.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg:pkg:30da7db405d2e49715cb0ed6 to a dependency declared by this repository.

Contextual assessment: brace-expansion@1.1.11 (duplicate candidate) is flagged again under GHSA-mh99-v99m-4gvg for a separate ReDoS variant. Same analysis: it is a dev-only transitive dependency used during testing and building. No runtime exposure.

Impact: none · Exploitability: unlikely

Developer action: Same as other brace-expansion advisories: update devDependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-mh99-v99m-4gvg:pkg:30da7db405d2e49715cb0ed6
File role: production
Source: package-lock.json

Dependency advisory GHSA-rgw5-rvv9-x895:pkg:567c541f015fe4079ca9b17e applies

Expected behavior · high confidence

Same as above – a development-tool issue with no user impact.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895:pkg:567c541f015fe4079ca9b17e to a dependency declared by this repository.

Contextual assessment: brace-expansion@1.1.11 flagged under GHSA-rgw5-rvv9-x895, another ReDoS variation. Same conclusion: dev-only, not runtime, no attack surface.

Impact: none · Exploitability: unlikely

Developer action: Update or ignore; no user-facing consequence.

Scanner: osv-scanner 2.4.0
Rule: GHSA-rgw5-rvv9-x895:pkg:567c541f015fe4079ca9b17e
File role: production
Source: package-lock.json

Dependency advisory GHSA-7p8r-x3mc-p8w7:pkg:2f8d75dd087c1050a99a8192 applies

Expected behavior · high confidence

This vulnerability is in a utility used during development. It cannot affect users of the MCP Client extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-7p8r-x3mc-p8w7:pkg:2f8d75dd087c1050a99a8192 to a dependency declared by this repository.

Contextual assessment: fast-uri@3.0.6 is a transitive dev dependency used by ajv and other build tooling. The advisory GHSA-7p8r-x3mc-p8w7 involves denial of service via crafted URI. This package is not loaded in the runtime extension; it is only used during build and testing. No attacker-controlled URI reaches this package in the shipped product.

Impact: none · Exploitability: unlikely

Developer action: Update fast-uri by updating the devDependency chain; no user impact.

Scanner: osv-scanner 2.4.0
Rule: GHSA-7p8r-x3mc-p8w7:pkg:2f8d75dd087c1050a99a8192
File role: production
Source: package-lock.json

Dependency advisory GHSA-4c8g-83qw-93j6:pkg:181d5c1a6aff27dd93f86cff applies

Expected behavior · high confidence

Duplicate advisory for the same development-only package. No user risk.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-4c8g-83qw-93j6:pkg:181d5c1a6aff27dd93f86cff to a dependency declared by this repository.

Contextual assessment: fast-uri@3.0.6 flagged under GHSA-4c8g-83qw-93j6, another advisory for the same package. Same analysis: dev-only transitive dependency, no runtime exposure.

Impact: none · Exploitability: unlikely

Developer action: Same as previous fast-uri advisory.

Scanner: osv-scanner 2.4.0
Rule: GHSA-4c8g-83qw-93j6:pkg:181d5c1a6aff27dd93f86cff
File role: production
Source: package-lock.json

Dependency advisory GHSA-3ppc-4f35-3m26:pkg:f700a97b2d134373c6c36877 applies

Expected behavior · high confidence

This vulnerability is in a pattern-matching library used during testing. It does not affect the extension's operation.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3ppc-4f35-3m26:pkg:f700a97b2d134373c6c36877 to a dependency declared by this repository.

Contextual assessment: minimatch@5.1.6 is a transitive dev dependency used by jest and babel. The advisory GHSA-3ppc-4f35-3m26 is a ReDoS vulnerability. This package is not present in the runtime extension bundle; it is used only during test execution. No attacker input reaches minimatch in the shipped product.

Impact: none · Exploitability: unlikely

Developer action: Update minimatch by updating devDependencies; low priority.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3ppc-4f35-3m26:pkg:f700a97b2d134373c6c36877
File role: production
Source: package-lock.json

JavaScript analysis reported javascript.download-to-execution

Expected behavior · high confidence

Same as before: network usage is intended, and the code execution patterns are just helpers. No danger.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.download-to-execution in this repository.

Contextual assessment: Same as group 1 candidate 0b2d0714. The normalized source confirms that network primitives (in MCP client logic) and code execution primitives (polyfills) coexist but are not causally connected. No exploit path.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.download-to-execution
File role: generated
Source: dist/index.js:25-1018

Dependency advisory GHSA-23c5-xmqv-rm74:pkg:28c6f8e6010383b649a97a01 applies

Expected behavior · high confidence

Another development-only vulnerability. No user risk.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-23c5-xmqv-rm74:pkg:28c6f8e6010383b649a97a01 to a dependency declared by this repository.

Contextual assessment: minimatch@3.1.2 is an older version used by babel and other tools. The advisory GHSA-23c5-xmqv-rm74 is a ReDoS issue. Same analysis: dev-only, not runtime.

Impact: none · Exploitability: unlikely

Developer action: Update to patched minimatch via devDependency updates.

Scanner: osv-scanner 2.4.0
Rule: GHSA-23c5-xmqv-rm74:pkg:28c6f8e6010383b649a97a01
File role: production
Source: package-lock.json

Dependency advisory GHSA-3jxr-9vmj-r5cp:pkg:c6056f5a45897dd10bfacade applies

Expected behavior · high confidence

Same brace-expansion issue in a development context.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp:pkg:c6056f5a45897dd10bfacade to a dependency declared by this repository.

Contextual assessment: brace-expansion@1.1.11 under GHSA-3jxr-9vmj-r5cp, another ReDoS advisory for this package. Dev-only, not runtime.

Impact: none · Exploitability: unlikely

Developer action: Update devDependencies.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3jxr-9vmj-r5cp:pkg:c6056f5a45897dd10bfacade
File role: production
Source: package-lock.json

Dependency advisory GHSA-v39h-62p7-jpjc:pkg:a6be302000b0d22d393bcd4e applies

Expected behavior · high confidence

Third fast-uri advisory, all development-only.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v39h-62p7-jpjc:pkg:a6be302000b0d22d393bcd4e to a dependency declared by this repository.

Contextual assessment: fast-uri@3.0.6 under GHSA-v39h-62p7-jpjc, another fast-uri advisory. Dev-only, not runtime.

Impact: none · Exploitability: unlikely

Developer action: Update fast-uri via devDependency updates.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v39h-62p7-jpjc:pkg:a6be302000b0d22d393bcd4e
File role: production
Source: package-lock.json

Dependency advisory GHSA-4x5r-pxfx-6jf8:pkg:1c1f84f322690ba267d9bb14 applies

Expected behavior · high confidence

This is a low-severity issue in the compiler used to build the extension. It cannot be exploited by users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-4x5r-pxfx-6jf8:pkg:1c1f84f322690ba267d9bb14 to a dependency declared by this repository.

Contextual assessment: @babel/core@7.26.0 is a direct devDependency used for transpilation. The advisory GHSA-4x5r-pxfx-6jf8 is a low-severity issue related to Babel's polyfill handling. This package is only executed during the build step and is not shipped in the runtime extension. No attacker control over the build process is assumed.

Impact: none · Exploitability: unlikely

Developer action: Update @babel/core to a patched version; no user-facing impact.

Scanner: osv-scanner 2.4.0
Rule: GHSA-4x5r-pxfx-6jf8:pkg:1c1f84f322690ba267d9bb14
File role: production
Source: package-lock.json

Dependency advisory GHSA-3ppc-4f35-3m26:pkg:173c1b2fab8e025126fb982c applies

Expected behavior · high confidence

Another minimatch advisory, development-only.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3ppc-4f35-3m26:pkg:173c1b2fab8e025126fb982c to a dependency declared by this repository.

Contextual assessment: minimatch@3.1.2 under GHSA-3ppc-4f35-3m26, duplicate advisory for minimatch 3.1.2. Dev-only, not runtime.

Impact: none · Exploitability: unlikely

Developer action: Update minimatch via devDependency updates.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3ppc-4f35-3m26:pkg:173c1b2fab8e025126fb982c
File role: production
Source: package-lock.json

Dependency advisory GHSA-3jxr-9vmj-r5cp:pkg:4914f0d37f422ddfa7f1c7dd applies

Expected behavior · high confidence

This is a known issue in a package used only during development, not in the actual extension that users run. It cannot be exploited by someone using the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp:pkg:4914f0d37f422ddfa7f1c7dd to a dependency declared by this repository.

Contextual assessment: The vulnerable package brace-expansion@2.0.1 is a transitive dependency of devDependencies used only during build and test (e.g., jest, webpack). It is never imported or executed in the shipped extension runtime (file). There is no attacker-controlled input path to the vulnerable code in the runtime context.

Impact: none · Exploitability: unlikely

Developer action: Update brace-expansion to a patched version in file when available, though there is no runtime impact.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3jxr-9vmj-r5cp:pkg:4914f0d37f422ddfa7f1c7dd
File role: production
Source: package-lock.json

JavaScript analysis reported javascript.xray.prototype-pollution

Expected behavior · high confidence

The scanner flagged some code patterns that look like they could pollute object prototypes, but they're just standard JavaScript helpers created by the build tool. There's no security risk.

Technical evidence

Scanner reason: JavaScript analysis matched static JavaScript security signal javascript.xray.prototype-pollution in this repository.

Contextual assessment: The prototype-pollution signals originate from Babel/regenerator polyfill code that uses `__proto__` assignments for inheritance and `Object.defineProperty` for standard class property definitions. No untrusted input flows into these operations, and the patterns match well-known transpiler output. No actual prototype pollution vulnerability exists.

Impact: none · Exploitability: unlikely

Developer action: none

Scanner: javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1
Rule: javascript.xray.prototype-pollution
File role: generated
Source: dist/index.js:1

Dependency advisory GHSA-968p-4wvh-cqc8:pkg:3a0c63b3ad926e4d282ae47a applies

Expected behavior · high confidence

This vulnerability is in a tool that helps build the extension, not in the extension itself. Users are not at risk.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-968p-4wvh-cqc8:pkg:3a0c63b3ad926e4d282ae47a to a dependency declared by this repository.

Contextual assessment: The vulnerable package @babel/helpers@7.26.0 is a dependency of @babel/core, which is a devDependency used for transpilation during build. It is not present in the runtime bundle and cannot be reached by an attacker.

Impact: none · Exploitability: unlikely

Developer action: Update @babel/helpers when a patched version is available to keep build tooling secure.

Scanner: osv-scanner 2.4.0
Rule: GHSA-968p-4wvh-cqc8:pkg:3a0c63b3ad926e4d282ae47a
File role: production
Source: package-lock.json

Dependency advisory GHSA-wf6x-7x77-mvgw:pkg:47474d29e3aaf60546241778 applies

Expected behavior · high confidence

This package is only used during development, not when running the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-wf6x-7x77-mvgw:pkg:47474d29e3aaf60546241778 to a dependency declared by this repository.

Contextual assessment: immutable@5.0.3 is a transitive dependency of devDependencies (likely from jest or babel). It is not in the runtime dependency tree and has no exposure.

Impact: none · Exploitability: unlikely

Developer action: Update immutable if a patched version is available.

Scanner: osv-scanner 2.4.0
Rule: GHSA-wf6x-7x77-mvgw:pkg:47474d29e3aaf60546241778
File role: production
Source: package-lock.json

Dependency advisory GHSA-7r86-cg39-jmmj:pkg:fa706fb036ae029fca4e7e55 applies

Expected behavior · high confidence

This vulnerability affects a development-only package. The extension's users cannot be affected.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-7r86-cg39-jmmj:pkg:fa706fb036ae029fca4e7e55 to a dependency declared by this repository.

Contextual assessment: minimatch@3.1.2 is a transitive devDependency (used by jest and other test/bundling tools). No runtime exposure.

Impact: none · Exploitability: unlikely

Developer action: Update minimatch to a non-vulnerable version if available.

Scanner: osv-scanner 2.4.0
Rule: GHSA-7r86-cg39-jmmj:pkg:fa706fb036ae029fca4e7e55
File role: production
Source: package-lock.json

Dependency advisory GHSA-rgw5-rvv9-x895:pkg:f366c29948c70f361f7b3905 applies

Expected behavior · high confidence

Duplicate of the earlier brace-expansion advisory. Still only a development-time risk.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895:pkg:f366c29948c70f361f7b3905 to a dependency declared by this repository.

Contextual assessment: Another advisory for brace-expansion@2.0.1, same as candidate 7760. It remains a devDependency-only concern with no runtime path.

Impact: none · Exploitability: unlikely

Developer action: Same as candidate 7760.

Scanner: osv-scanner 2.4.0
Rule: GHSA-rgw5-rvv9-x895:pkg:f366c29948c70f361f7b3905
File role: production
Source: package-lock.json

Dependency advisory GHSA-mh99-v99m-4gvg:pkg:b2da24d008a395da126c5ca9 applies

Expected behavior · high confidence

Another duplicate advisory. No risk to users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg:pkg:b2da24d008a395da126c5ca9 to a dependency declared by this repository.

Contextual assessment: Third advisory for brace-expansion@2.0.1, same devDependency transitive. No runtime exposure.

Impact: none · Exploitability: unlikely

Developer action: Update brace-expansion when possible.

Scanner: osv-scanner 2.4.0
Rule: GHSA-mh99-v99m-4gvg:pkg:b2da24d008a395da126c5ca9
File role: production
Source: package-lock.json

Dependency advisory GHSA-v2hh-gcrm-f6hx:pkg:9600c6310040af533d8d1920 applies

Expected behavior · high confidence

This security issue is in a development tool, not the extension itself.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v2hh-gcrm-f6hx:pkg:9600c6310040af533d8d1920 to a dependency declared by this repository.

Contextual assessment: fast-uri@3.0.6 is a dependency of ajv, which is a devDependency used by webpack or similar bundlers. Not in runtime.

Impact: none · Exploitability: unlikely

Developer action: Update fast-uri to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v2hh-gcrm-f6hx:pkg:9600c6310040af533d8d1920
File role: production
Source: package-lock.json

Dependency advisory GHSA-q3j6-qgpj-74h6:pkg:2d0d5c8fc1bb62c4e3b44b2a applies

Expected behavior · high confidence

Duplicate advisory for the same development-only package.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-q3j6-qgpj-74h6:pkg:2d0d5c8fc1bb62c4e3b44b2a to a dependency declared by this repository.

Contextual assessment: Second advisory for fast-uri@3.0.6, same devDependency context. No runtime exposure.

Impact: none · Exploitability: unlikely

Developer action: Update fast-uri when a fix is released.

Scanner: osv-scanner 2.4.0
Rule: GHSA-q3j6-qgpj-74h6:pkg:2d0d5c8fc1bb62c4e3b44b2a
File role: production
Source: package-lock.json

Dependency advisory GHSA-v56q-mh7h-f735:pkg:b44c0e2e8fd0009fd7dd62d0 applies

Expected behavior · high confidence

This vulnerability is in a development-only package, not in the extension users run.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v56q-mh7h-f735:pkg:b44c0e2e8fd0009fd7dd62d0 to a dependency declared by this repository.

Contextual assessment: immutable@5.0.3 is a transitive devDependency (used by jest or similar). No runtime reachability in the shipped extension.

Impact: none · Exploitability: unlikely

Developer action: Update immutable to a non-vulnerable version when available.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v56q-mh7h-f735:pkg:b44c0e2e8fd0009fd7dd62d0
File role: production
Source: package-lock.json

Dependency advisory GHSA-7r86-cg39-jmmj:pkg:d1c7abe70f0b881829849922 applies

Expected behavior · high confidence

Development-only package with no impact on extension users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-7r86-cg39-jmmj:pkg:d1c7abe70f0b881829849922 to a dependency declared by this repository.

Contextual assessment: minimatch@5.1.6 is a transitive devDependency. Not used at runtime.

Impact: none · Exploitability: unlikely

Developer action: Update minimatch to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-7r86-cg39-jmmj:pkg:d1c7abe70f0b881829849922
File role: production
Source: package-lock.json

Dependency advisory GHSA-8fgc-7cc6-rx7x:pkg:5073cde698ce07faa9278c33 applies

Expected behavior · high confidence

Webpack is a build tool, not part of the running extension. This advisory is not a risk to users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-8fgc-7cc6-rx7x:pkg:5073cde698ce07faa9278c33 to a dependency declared by this repository.

Contextual assessment: webpack@5.97.1 is a devDependency used for bundling the extension. The runtime bundle (file) is static and does not include webpack. No attacker control over webpack configuration at runtime.

Impact: none · Exploitability: unlikely

Developer action: Update webpack to the latest patch version to keep build tooling secure.

Scanner: osv-scanner 2.4.0
Rule: GHSA-8fgc-7cc6-rx7x:pkg:5073cde698ce07faa9278c33
File role: production
Source: package-lock.json

Dependency advisory GHSA-qj8w-gfj5-8c6v:pkg:7d87d343aa0c80bd7734851a applies

Expected behavior · high confidence

Development-only package, no user impact.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-qj8w-gfj5-8c6v:pkg:7d87d343aa0c80bd7734851a to a dependency declared by this repository.

Contextual assessment: serialize-javascript@6.0.2 is a transitive devDependency (used by terser-webpack-plugin). Not present in runtime.

Impact: none · Exploitability: unlikely

Developer action: Update serialize-javascript when a fix is available.

Scanner: osv-scanner 2.4.0
Rule: GHSA-qj8w-gfj5-8c6v:pkg:7d87d343aa0c80bd7734851a
File role: production
Source: package-lock.json

Dependency advisory GHSA-f886-m6hf-6m8v:pkg:689dbb9a6583acd763e055a3 applies

Expected behavior · high confidence

Same development-only advisory as before.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-f886-m6hf-6m8v:pkg:689dbb9a6583acd763e055a3 to a dependency declared by this repository.

Contextual assessment: brace-expansion@2.0.1 appears again as a transitive devDependency. No runtime exposure.

Impact: none · Exploitability: unlikely

Developer action: Update brace-expansion to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-f886-m6hf-6m8v:pkg:689dbb9a6583acd763e055a3
File role: production
Source: package-lock.json

Dependency advisory GHSA-2g4f-4pwh-qvx6:pkg:e75f751e62b1e8418f7d80f3 applies

Expected behavior · high confidence

This vulnerability is in a package that validates schemas during building, not in the live extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-2g4f-4pwh-qvx6:pkg:e75f751e62b1e8418f7d80f3 to a dependency declared by this repository.

Contextual assessment: ajv@8.17.1 is a devDependency used by webpack. The advisory requires prototype pollution via crafted JSON schema, but no attacker can feed input to ajv at runtime; it is only used during build.

Impact: none · Exploitability: unlikely

Developer action: Update ajv if a patched version exists.

Scanner: osv-scanner 2.4.0
Rule: GHSA-2g4f-4pwh-qvx6:pkg:e75f751e62b1e8418f7d80f3
File role: production
Source: package-lock.json

Dependency advisory GHSA-52cp-r559-cp3m:pkg:b50fc3b7dc4817b2367e97d7 applies

Expected behavior · high confidence

This YAML parser is only used in development, not in the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-52cp-r559-cp3m:pkg:b50fc3b7dc4817b2367e97d7 to a dependency declared by this repository.

Contextual assessment: js-yaml@3.14.1 is a transitive devDependency (used by jest or babel). No runtime usage.

Impact: none · Exploitability: unlikely

Developer action: Update js-yaml to a non-vulnerable version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-52cp-r559-cp3m:pkg:b50fc3b7dc4817b2367e97d7
File role: production
Source: package-lock.json

Dependency advisory GHSA-mh29-5h37-fv8m:pkg:be84c0d3fc58da2798a815e5 applies

Expected behavior · high confidence

Duplicate advisory for the same development-only package.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-mh29-5h37-fv8m:pkg:be84c0d3fc58da2798a815e5 to a dependency declared by this repository.

Contextual assessment: Second advisory for js-yaml@3.14.1, same devDependency context. No runtime exposure.

Impact: none · Exploitability: unlikely

Developer action: Update js-yaml when a fix is available.

Scanner: osv-scanner 2.4.0
Rule: GHSA-mh29-5h37-fv8m:pkg:be84c0d3fc58da2798a815e5
File role: production
Source: package-lock.json

Related contextual observations

Multiple transitive dev dependency advisories with no runtime reachability

low risk · high confidence

The security scanner found several known issues in libraries used only to build or test the extension. None of these libraries run when you use the MCP Client extension, so they pose no risk.

Technical assessment

All candidates in this group are from OSV-Scanner and target transitive dependencies that are resolved during development or testing only. The lockfile shows these packages are part of the devDependency tree (babel, jest, webpack, etc.) and are not shipped or executed in the runtime extension. No evidence of any runtime code path loading these packages or handling attacker-controlled input.

Impact: none · Exploitability: unlikely

Developer action: Periodically update devDependencies to latest patched versions as a best practice, but no immediate action required.

Sources:

package-lock.json:1

Additional transitive dev dependency advisories with no runtime reachability

low risk · high confidence

More development-only library vulnerabilities found by the scanner. They cannot affect you while using the MCP Client extension.

Technical assessment

All candidates in this second group are also from OSV-Scanner and target packages used only in development: fast-uri, minimatch, brace-expansion, @babel/core. None of these are loaded at runtime in the shipped extension. The lockfile confirms they are devDependencies or transitive dependencies of devDependencies. No evidence of runtime code path or attacker-controlled input.

Impact: none · Exploitability: unlikely

Developer action: Best practice is to update all devDependencies to latest versions, but these have no user-facing security impact.

Sources:

package-lock.json:1

All flagged packages are devDependencies with no runtime exposure

low risk · high confidence

Each of these security warnings is about a part of the development toolkit, not about the extension itself. They don't put users at risk.

Technical assessment

All OSV advisories in this group affect packages that are devDependencies or transitive devDependencies. The extension's runtime bundle (file) does not include these packages. No attacker-controlled input reaches any of these dependencies at runtime. The reported vulnerabilities are not exploitable in the context of a SillyTavern user running the extension.

Impact: none · Exploitability: unlikely

Developer action: Update flagged devDependencies to patched versions as a best practice, but note no runtime impact.

Sources:

package-lock.json:1

All flagged packages are devDependencies with no runtime exposure

low risk · high confidence

Every security warning here is about development tools, not the extension itself. Users of the extension are not affected by these vulnerabilities.

Technical assessment

All OSV advisories in this group affect devDependencies or their transitive dependencies. The extension ships only its compiled bundle (file) which does not include these packages. No attacker-controlled input reaches these dependencies at runtime, and the vulnerabilities are not exploitable in the user-facing extension.

Impact: none · Exploitability: unlikely

Developer action: Update the flagged devDependencies to patched versions as a hygiene measure, but note there is no runtime security impact.

Sources:

package-lock.json:1

Coverage and limitations

Inventory: 21 files · 476627 bytes
Contextual coverage: 46 of 46 candidates assessed

JavaScript coverage

Status: Incomplete
Candidates: 7 files · 94560 bytes
X-Ray review families: 12 warning occurrences compacted to 3 evidence-preserving review families
Representations: 7 raw · 0 decoded · 1 normalized · 0 bundle modules
Stage scans: 7 raw signatures · 3 raw AST · 7 raw OpenGrep · 1 derived signatures · 1 derived AST · 1 derived OpenGrep

Unresolved JavaScript stages

src/index.ts — raw-ast / parse
src/json-error.ts — raw-ast / parse
src/mcp-client.ts — raw-ast / parse
src/types/types.ts — raw-ast / parse

Tools

inventory 0.1.0 — completed
tavernkeeper-static 5 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
javascript-analysis webcrack-2.16.0_js-x-ray-16.0.0_signatures-1_literals-1_families-1 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — completed

Limitations

This advisory review cannot prove the absence of unknown behavior.
JavaScript analysis was incomplete, so this first-filter scan supports no clean conclusion about unobserved behavior.

Technical scan identity

Full commit: 04fdfe4410d59534ab379e9741e1277a95f6d384
Completed: Aug 11, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · deepseek/deepseek-v4-flash:thinking
Scanner: 0.1.0
Scanner policy: 5
Rule catalog: 2
Contextual policy: 5
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v7
Assessment schema: contextual-assessment-v2
Review provenance: 8 fresh / 0 reused groups · 45 fresh / 0 reused candidates
Review source reports: none
Evidence triage: 1 deterministic / 45 contextual candidates · 8 contextual / 9 total behavior cases
Model budget: 4 model calls · 8 / 12 fresh cases · 177102 / 200000 estimated input · 181884 / 250000 actual input · 19032 / 40000 output tokens
Review batching: 4 model calls · up to 2 groups and 16 candidates per call · 0 retry calls · 0 over-budget singleton calls
Review usage: 181884 input · 19032 output · 159864 cache read · 0 reasoning tokens
Report: f1142dafe4041cf217ce17a3af5c92bb7e66851a1568152763ca0046a7a73af7