Flight Logger MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for production use. The server depends on external shared authentication and persistence modules that are not included in the repository, creating an unverifiable trust dependency. Additionally, the code uses unsafe path manipulation (sys.path.insert with user home directory expansion) to import these critical security modules, which could be exploited via path injection attacks. The authentication and data storage mechanisms cannot be audited, and the reliance on external, non-standard shared dependencies introduces significant supply chain risk. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.