Back to search
medium low medium low
? Not scanned yet
io.github.isdaniel/pgtuner_mcp
Author isdaniel
Scanned 48d ago
provides AI-powered PostgreSQL performance tuning capabilities.
Versions
0.5.2first seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 4
network Server uses network capabilities via: urllib filesystem Server uses filesystem capabilities via: open(), os, pathlib database Server uses database capabilities via: psycopg env_vars Server uses env_vars capabilities via: os.environ Scan Findings 34
high
Remote transport without authentication
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: mcp@1.12.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.12.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.12.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.12.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.12.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.12.0 (PYSEC-2026-3483)
medium
Vulnerable dependency: starlette@0.27.0 (GHSA-2c2j-9gv5-cj73)
medium
Vulnerable dependency: starlette@0.27.0 (GHSA-82w8-qh3p-5jfq)
medium
Vulnerable dependency: starlette@0.27.0 (GHSA-86qp-5c8j-p5mr)
medium
Vulnerable dependency: starlette@0.27.0 (GHSA-f96h-pmfr-66vw)
medium
Vulnerable dependency: starlette@0.27.0 (GHSA-jp82-jpqv-5vv3)
medium
Vulnerable dependency: starlette@0.27.0 (GHSA-wqp7-x3pw-xc5r)
medium
Vulnerable dependency: starlette@0.27.0 (GHSA-x746-7m8f-x49c)
medium
Vulnerable dependency: starlette@0.27.0 (PYSEC-2026-161)
medium
Vulnerable dependency: starlette@0.27.0 (PYSEC-2026-1941)
medium
Vulnerable dependency: starlette@0.27.0 (PYSEC-2026-1943)
medium
Vulnerable dependency: starlette@0.27.0 (PYSEC-2026-2280)
medium
Vulnerable dependency: starlette@0.27.0 (PYSEC-2026-2281)
medium
Vulnerable dependency: starlette@0.27.0 (PYSEC-2026-248)
medium
Vulnerable dependency: starlette@0.27.0 (PYSEC-2026-249)
info
pyproject.toml metadata
info
Transport: stdio
info
Required env vars (7)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 4 components
critical
Database URL with Password found in isdaniel-pgtuner_mcp-2eaa0cc/README.md
critical
Database URL with Password found in isdaniel-pgtuner_mcp-2eaa0cc/smithery.yaml
medium
No build provenance detected (SLSA L0)