Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

caiovicentino/polymarket-mcp-server

              main @ b30d643
            

Fixes

CVEs

HIGH

Peak severity

66.7%

Coverage

Highlights

Incorrect Trade Execution / Logic Error: 1 prior fix. Scrutinize any change in this area.

src/polymarket_mcp/server.py: most-fixed (1 issue). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Incorrect Trade Execution / Logic Error: All order creation and management functions relied on the first token in a list, ignoring the requested outcome, causing wrong-side trades and financial loss.

Unauthenticated Configuration Modification / Insecure Binding: Dashboard bound to all interfaces with no authentication, allowing remote attackers to modify safety limits.

Information Disclosure: Sensitive API credentials were logged at INFO level, exposing them to anyone with log access.