Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

supabase-community/supabase-mcp

              main @ 9679b78
            

Fixes

CVEs

HIGH

Peak severity

66.7%

Coverage

Highlights

Denial of Service: 1 prior fix. Scrutinize any change in this area.

packages/mcp-server-supabase/src/pg-meta/index.ts: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: Dynamic string formatting in database tools can allow LLMs or users to execute arbitrary SQL commands. Utilizing parameterized queries is essential to prevent dynamic queries from hijacking the database layer.

Prompt Injection: Unredacted database execution results can contain untrusted instructions that hijack LLM behavior. Mitigating this requires redacting return values and explicitly warning the model in the tool description.

Denial of Service: Unbounded memory growth and denial of service can occur if Zod schemas with descriptions are continuously registered inside request loops instead of being hoisted to the module level.