autoposting-cli

Security Findings (106)

• CriticalAS-004

  📦Supply Chain CVEs (OSV)

  proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet. Found in the pinned source production lockfile ([email protected]). Package presence is confirmed; exploitability in the CLI stdio path is not established.

  Fix: Update the lockfile to a patched version; see https://osv.dev/vulnerability/GHSA-jqcg-44mw-7w3h. Review whether the affected OAuth-client or HTTP proxy-trust path is reachable in your deployment.

• HighAS-004

  📦Supply Chain CVEs (OSV)

  MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server. Found in the pinned source production lockfile (@modelcontextprotocol/[email protected]). Package presence is confirmed; exploitability in the CLI stdio path is not established.

  Fix: Update the lockfile to a patched version; see https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h. Review whether the affected OAuth-client or HTTP proxy-trust path is reachable in your deployment.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×12

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  search-kbingest-kbimport-clipupload-medialist-api-routesapi-requestlist-webhooksget-webhookcreate-webhookupdate-webhookdelete-webhooktest-webhook

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×61

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  list-postsget-postcreate-postupdate-postdelete-postpublish-postschedule-postretry-postrewrite-postscore-postlist-brandsget-brandcreate-brandupdate-branddelete-brandbrand-auth-statuslist-agentsget-agentcreate-agentupdate-agentdelete-agentrun-agenttoggle-agentagent-runslist-kbsget-kbcreate-kbdelete-kbsearch-kbingest-kbkb-docsgenerate-ideaslist-ideasenrich-ideadelete-idealist-clipsget-clipimport-cliprender-clipcreate-clip-draftupload-clippublish-clipdelete-clipupload-medialist-api-routesapi-requestlist-carouselsget-carouselcreate-carouselgenerate-carouseldraft-carouseldelete-carousellist-webhooksget-webhookcreate-webhookupdate-webhookdelete-webhooktest-webhookbilling-statusbilling-creditsusage-summary

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×30

  declared capabilities: filesystem access

  create-postupdate-postdelete-postrewrite-postcreate-brandupdate-branddelete-brandcreate-agentupdate-agentdelete-agentcreate-kbdelete-kbdelete-ideacreate-clip-draftupload-clipdelete-clipcreate-carouseldelete-carousel

  declared capabilities: network access, database access

  search-kb

  declared capabilities: network access

  ingest-kbimport-clip

  declared capabilities: network access, filesystem access

  upload-media

  declared capabilities: network access, HTTP requests

  list-api-routes

  declared capabilities: network access, filesystem access, HTTP requests

  api-requestcreate-webhookupdate-webhook

  declared capabilities: HTTP requests

  list-webhooksget-webhooktest-webhook

  declared capabilities: filesystem access, HTTP requests

  delete-webhook

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-010

  🔑Insecure Secret Handling

  create-webhook:input parameter "secret" accepts a credential (informational; not evidence of insecure handling)

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.