Reported issues

Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.

IssueSeverityListed versionReported
GHSA-fh3r-g96v-f578@arikusi/deepseek-mcp-server has an Authorization Bypass Through User-Controlled KeyAlso filed as CVE-2026-55604 high Not flagged Jul 9, 2026
GHSA-72f3-6w86-7rv3@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP EndpointAlso filed as CVE-2026-55605 medium Not flagged Jul 9, 2026

Versions in the registry

2.4.0 (listed), 2.3.0, 2.2.1, 2.2.0, 2.1.0, 2.0.0, 1.8.0, 1.7.0, 1.6.0, 1.5.2, 1.5.1, 1.5.0, 1.4.3