SafeDep Vet MCP
Protect your AI agents and IDEs from malicious open-source packages.
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.safedep/vet-mcp
· Source code · Website
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| CVE-2025-59163vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote att… | low | Not checked | Sep 29, 2025 |
Versions in the registry
1.20.0 (listed), 1.19.1, 1.19.0, 1.18.2, 1.18.1, 1.18.0, 1.17.5, 1.17.4, 1.17.3, 1.17.2, 1.17.1, 1.17.0, 1.16.2, 1.16.1, 1.16.0, 1.15.0, 1.14.0, 1.13.2, 1.13.1, 1.13.0, 1.12.22, 1.12.21, 1.12.20, 1.12.16, 1.12.15, 1.12.14, v1.12.13