io.github.paiml/pforge
version 0.1.2
- scanned 2026-10-16
- source github.com/paiml/pforge
- commit 78e6860810d7
- transport unknown
- files read 16
- methodology 0.2.0
- ruleset 0.1.1
No tag matching version 0.1.2 was found in this repository, so the scan read the default branch instead. The findings below describe that code, not necessarily the released version.
91
12 vendored or minified paths were excluded before scanning; machine-generated bundles are not the server's own code
not assessed
the registry entry declares no transport, so `03` §4's stdio carve-out cannot be applied either way
not assessed
185 vulnerabilities were found and none could be placed in `03` §6's table — no CVSS score, or an ecosystem whose manifest we cannot parse for direct-vs-transitive
66measured on 90% of this axis
65
The evidence
Every deduction below names the artefact that produced it. Nothing on this page was executed: the source was read, never run, and no running server was contacted.
Code Safety
- pforge-book/book/book.js:23mcp-js-ssrf-nonliteral-url (medium/low)
An outbound request is made to a URL that is not a literal. If any part is caller-supplied the server can be aimed at internal hosts it can reach and the caller cannot.
function fetch_with_timeout(url, options, timeout = 6000) { return Promise.race([ fetch(url, options), new Promise((_, reject) => setTimeout(() => reject(new Error('timeout')), timeout)) ]); - pforge-book/book/searcher.js:471mcp-js-ssrf-nonliteral-url (medium/low)
An outbound request is made to a URL that is not a literal. If any part is caller-supplied the server can be aimed at internal hosts it can reach and the caller cannot.
} fetch(path_to_root + 'searchindex.json') .then(response => response.json()) .then(json => init(json))
Auth Posture
- authentication_model
the registry entry declares no transport, so `03` §4's stdio carve-out cannot be applied either way
- transport_security
the registry entry declares no transport for any package or remote
- secret_handling
detect-secrets matched 5 credential-shaped string(s), every one from a keyword or entropy heuristic (Secret Keyword). Those flag placeholders, variable names and content hashes as readily as credentials, so they do not establish the committed credential `03` §4's 0 asserts, and this sub-check is not scored; Secret Keyword at .github/workflows/ci.yml:21; Secret Keyword at crates/pforge-runtime/src/handlers/http.rs:369; Secret Keyword at pforge-book/book/ch07-01-red.html:422; Secret Keyword at pforge-book/book/print.html:11315; Secret Keyword at pforge-book/src/ch07-01-red.md:345
- authorization_granularity
no tool registration was recognised anywhere in the source. An MCP server registers tools by definition, so this is a gap in our detection rather than a server with none, and `03` §4's threshold cannot be applied to it. A tool-list handler IS present, so the tools are built in a shape this counter could not enumerate.
Dependency Health
Showing the 50 most severe of 185 findings on this axis. The score was computed over all of them — findings beyond the fourth of a severity still deduct at a tenth of their weight — so the remainder is omitted from this page, not from the arithmetic.
- examples/hello-world/Cargo.lockopenssl 0.10.73 — GHSA-xp3w-r5p5-63rr
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.10.79
https://osv.dev/vulnerability/GHSA-xp3w-r5p5-63rr - examples/pmat-server/Cargo.lockopenssl 0.10.73 — GHSA-xp3w-r5p5-63rr
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.10.79
https://osv.dev/vulnerability/GHSA-xp3w-r5p5-63rr - examples/polyglot-server/Cargo.lockopenssl 0.10.73 — GHSA-xp3w-r5p5-63rr
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.10.79
https://osv.dev/vulnerability/GHSA-xp3w-r5p5-63rr - examples/production-server/Cargo.lockopenssl 0.10.73 — GHSA-xp3w-r5p5-63rr
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.10.79
https://osv.dev/vulnerability/GHSA-xp3w-r5p5-63rr - examples/rest-api-proxy/Cargo.lockopenssl 0.10.73 — GHSA-xp3w-r5p5-63rr
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.10.79
https://osv.dev/vulnerability/GHSA-xp3w-r5p5-63rr - examples/hello-world/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0037
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.11.14
https://osv.dev/vulnerability/RUSTSEC-2026-0037 - examples/pmat-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0037
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.11.14
https://osv.dev/vulnerability/RUSTSEC-2026-0037 - examples/polyglot-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0037
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.11.14
https://osv.dev/vulnerability/RUSTSEC-2026-0037 - examples/production-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0037
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.11.14
https://osv.dev/vulnerability/RUSTSEC-2026-0037 - examples/rest-api-proxy/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0037
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.11.14
https://osv.dev/vulnerability/RUSTSEC-2026-0037 - fuzz/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0037
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.7, fixed in 0.11.14
https://osv.dev/vulnerability/RUSTSEC-2026-0037 - examples/hello-world/Cargo.lockopenssl 0.10.73 — GHSA-hppc-g8h3-xhp3
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.3, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-hppc-g8h3-xhp3 - examples/pmat-server/Cargo.lockopenssl 0.10.73 — GHSA-hppc-g8h3-xhp3
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.3, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-hppc-g8h3-xhp3 - examples/polyglot-server/Cargo.lockopenssl 0.10.73 — GHSA-hppc-g8h3-xhp3
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.3, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-hppc-g8h3-xhp3 - examples/production-server/Cargo.lockopenssl 0.10.73 — GHSA-hppc-g8h3-xhp3
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.3, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-hppc-g8h3-xhp3 - examples/rest-api-proxy/Cargo.lockopenssl 0.10.73 — GHSA-hppc-g8h3-xhp3
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.3, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-hppc-g8h3-xhp3 - examples/hello-world/Cargo.lockopenssl 0.10.73 — GHSA-ghm9-cr32-g9qj
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.1, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-ghm9-cr32-g9qj - examples/pmat-server/Cargo.lockopenssl 0.10.73 — GHSA-ghm9-cr32-g9qj
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.1, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-ghm9-cr32-g9qj - examples/polyglot-server/Cargo.lockopenssl 0.10.73 — GHSA-ghm9-cr32-g9qj
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.1, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-ghm9-cr32-g9qj - examples/production-server/Cargo.lockopenssl 0.10.73 — GHSA-ghm9-cr32-g9qj
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.1, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-ghm9-cr32-g9qj - examples/rest-api-proxy/Cargo.lockopenssl 0.10.73 — GHSA-ghm9-cr32-g9qj
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 8.1, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-ghm9-cr32-g9qj - examples/hello-world/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0185
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.15
https://osv.dev/vulnerability/RUSTSEC-2026-0185 - examples/pmat-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0185
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.15
https://osv.dev/vulnerability/RUSTSEC-2026-0185 - examples/polyglot-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0185
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.15
https://osv.dev/vulnerability/RUSTSEC-2026-0185 - examples/production-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0185
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.15
https://osv.dev/vulnerability/RUSTSEC-2026-0185 - examples/rest-api-proxy/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0185
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.15
https://osv.dev/vulnerability/RUSTSEC-2026-0185 - fuzz/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0185
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.15
https://osv.dev/vulnerability/RUSTSEC-2026-0185 - Cargo.lockquinn-proto 0.11.16 — RUSTSEC-2026-0340
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.18
https://osv.dev/vulnerability/RUSTSEC-2026-0340 - examples/hello-world/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0340
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.18
https://osv.dev/vulnerability/RUSTSEC-2026-0340 - examples/pmat-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0340
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.18
https://osv.dev/vulnerability/RUSTSEC-2026-0340 - examples/polyglot-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0340
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.18
https://osv.dev/vulnerability/RUSTSEC-2026-0340 - examples/production-server/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0340
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.18
https://osv.dev/vulnerability/RUSTSEC-2026-0340 - examples/rest-api-proxy/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0340
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.18
https://osv.dev/vulnerability/RUSTSEC-2026-0340 - fuzz/Cargo.lockquinn-proto 0.11.13 — RUSTSEC-2026-0340
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.18
https://osv.dev/vulnerability/RUSTSEC-2026-0340 - Cargo.lockquinn-proto 0.11.16 — RUSTSEC-2026-0341
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.11.17
https://osv.dev/vulnerability/RUSTSEC-2026-0341 - examples/hello-world/Cargo.lockrustls-webpki 0.103.7 — RUSTSEC-2026-0104
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.103.13
https://osv.dev/vulnerability/RUSTSEC-2026-0104 - examples/pmat-server/Cargo.lockrustls-webpki 0.103.7 — RUSTSEC-2026-0104
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.103.13
https://osv.dev/vulnerability/RUSTSEC-2026-0104 - examples/polyglot-server/Cargo.lockrustls-webpki 0.103.7 — RUSTSEC-2026-0104
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.103.13
https://osv.dev/vulnerability/RUSTSEC-2026-0104 - examples/production-server/Cargo.lockrustls-webpki 0.103.7 — RUSTSEC-2026-0104
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.103.13
https://osv.dev/vulnerability/RUSTSEC-2026-0104 - examples/rest-api-proxy/Cargo.lockrustls-webpki 0.103.7 — RUSTSEC-2026-0104
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.103.13
https://osv.dev/vulnerability/RUSTSEC-2026-0104 - fuzz/Cargo.lockrustls-webpki 0.103.7 — RUSTSEC-2026-0104
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.5, fixed in 0.103.13
https://osv.dev/vulnerability/RUSTSEC-2026-0104 - examples/hello-world/Cargo.lockopenssl 0.10.73 — GHSA-8c75-8mhr-p7r9
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-8c75-8mhr-p7r9 - examples/pmat-server/Cargo.lockopenssl 0.10.73 — GHSA-8c75-8mhr-p7r9
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-8c75-8mhr-p7r9 - examples/polyglot-server/Cargo.lockopenssl 0.10.73 — GHSA-8c75-8mhr-p7r9
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-8c75-8mhr-p7r9 - examples/production-server/Cargo.lockopenssl 0.10.73 — GHSA-8c75-8mhr-p7r9
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-8c75-8mhr-p7r9 - examples/rest-api-proxy/Cargo.lockopenssl 0.10.73 — GHSA-8c75-8mhr-p7r9
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-8c75-8mhr-p7r9 - examples/hello-world/Cargo.lockopenssl 0.10.73 — GHSA-pqf5-4pqq-29f5
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-pqf5-4pqq-29f5 - examples/pmat-server/Cargo.lockopenssl 0.10.73 — GHSA-pqf5-4pqq-29f5
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-pqf5-4pqq-29f5 - examples/polyglot-server/Cargo.lockopenssl 0.10.73 — GHSA-pqf5-4pqq-29f5
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-pqf5-4pqq-29f5 - examples/production-server/Cargo.lockopenssl 0.10.73 — GHSA-pqf5-4pqq-29f5
direct or transitive unknown — no parseable manifest for this ecosystem, CVSS 7.2, fixed in 0.10.78
https://osv.dev/vulnerability/GHSA-pqf5-4pqq-29f5
Maintenance
- recency
last commit 56 day(s) before 2026-10-16
- issue_responsiveness
median over 6 issue(s) in the last 6 months: 56.1 day(s) to first maintainer comment
- release_cadence
released 2 day(s) ago (by releases), inside `03` §5's 30-day window
- bus_factor
sole maintainer
- repository_signals
`03` §5 scores this by quartile WITHIN the server's category, which needs a distribution across every scanned server and so cannot be computed while scanning one. It is a post-pass over the crawl and that pass does not exist yet.
Transparency
- license
LICENSE present with no SPDX-License-Identifier tag; identified as 'MIT' from its text
- readme_quality
README.md: installation instructions (+25), configuration documented (+25), states what the server does in the first 200 words (+20)
- declared_scopes
neither the README nor the MCP manifest documents what the server accesses or what side effects it has
- changelog
CHANGELOG.md present
- security_contact
SECURITY.md present
Contest a finding
Every number here comes from a rule reading published source, and rules get things wrong. If something on this page is incorrect — or correct but mitigated by a check the rule cannot see — open an issue and we answer it in writing. A finding we got wrong is removed and the rule is fixed; one that stands is answered on the record.
Anyone can file: the maintainer, a researcher who disagrees with the classification, or a user who tested the server and could not reproduce it. Name this server and the rule or advisory ID shown beside the finding above. We aim to reply within five business days and to resolve within ten.