io.github.ooples/token-optimizer-mcp
Context-window optimization: caching, compression & smart file tools that cut tokens 60-90%.
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.ooples/token-optimizer-mcp
· Source code
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-76pc-mqxp-3rq5Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API EndpointsAlso filed as CVE-2026-55156 | medium | Not flagged | Aug 14, 2026 |
| GHSA-49mq-fc6q-3h46Token Optimizer MCP: OS command injection in smart_user via username in get-user-infoAlso filed as CVE-2026-55157 | high | Not flagged | Aug 14, 2026 |
Versions in the registry
7.9.0 (listed), 7.8.0, 7.7.1, 7.6.0, 7.5.1, 7.5.0, 7.4.4, 7.4.3, 7.4.1, 7.4.0, 7.3.0, 7.2.0, 5.1.1, 5.0.1, 2.1.0