github · mcp-server-neonHEAD

Remediation

Upgrade the pinned dependency to a patched version. Check the CVE's advisory URL for the recommended safe release, or use `npm audit fix` / `pip-audit --fix`. If no patched release is available yet, pin to a known-good prior version, vendor the fix, or remove the dependency.

Remediation

Upgrade the pinned dependency to a patched version. Check the CVE's advisory URL for the recommended safe release, or use `npm audit fix` / `pip-audit --fix`. If no patched release is available yet, pin to a known-good prior version, vendor the fix, or remove the dependency.

Remediation

Upgrade the pinned dependency to a patched version. Check the CVE's advisory URL for the recommended safe release, or use `npm audit fix` / `pip-audit --fix`. If no patched release is available yet, pin to a known-good prior version, vendor the fix, or remove the dependency.

Remediation

Upgrade the pinned dependency to a patched version. Check the CVE's advisory URL for the recommended safe release, or use `npm audit fix` / `pip-audit --fix`. If no patched release is available yet, pin to a known-good prior version, vendor the fix, or remove the dependency.

Remediation

Upgrade the pinned dependency to a patched version. Check the CVE's advisory URL for the recommended safe release, or use `npm audit fix` / `pip-audit --fix`. If no patched release is available yet, pin to a known-good prior version, vendor the fix, or remove the dependency.

Evidence

```typescript

app.post('/articles', async (c) => {

  console.log('Received POST /articles request');

  const body = await c.req.json();

  console.log('Request body parsed', { title: body.title });

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

```typescript

// DON'T create new loggers in each file

const logger = new Logger(); // Each file creates its own

console.log('some event');   // Bypasses the logger entirely

```

### Use Middleware for Consistent Wide Events

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

console.log('Received POST /articles request');

  const body = await c.req.json();

  console.log('Request body parsed', { title: body.title });

  const user = await getUser(c.get('userId'));

  console.log('User fetched', { userId: user.id });

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Evidence

```typescript

app.post('/checkout', async (c) => {

  console.log('Received checkout request');                    // Line 1

  console.log(`User ID: ${c.get('userId')}`);                  // Line 2

  const user = await getUser(c.get('userId'));

  console.log(`User fetched: ${user.email}`);                  // Line 3

Remediation

Strip C0/C1 control codes before printing user-controlled values. Python: re.sub(r"[\x00-\x08\x0b-\x1f\x7f]", "", s). Prefer a structured logger (json/logfmt) over raw print to stdout.

Remediation

Typosquat: verify you meant the popular package. If so, correct the spelling; if you truly intended the less-common name, suppress with an inline waiver. Stale release: check whether the package has a maintained fork or successor. If no patched release exists, vendor the code or migrate to an active alternative before the unmaintained code accrues unfixed CVEs.

Remediation

Typosquat: verify you meant the popular package. If so, correct the spelling; if you truly intended the less-common name, suppress with an inline waiver. Stale release: check whether the package has a maintained fork or successor. If no patched release exists, vendor the code or migrate to an active alternative before the unmaintained code accrues unfixed CVEs.

Remediation

Typosquat: verify you meant the popular package. If so, correct the spelling; if you truly intended the less-common name, suppress with an inline waiver. Stale release: check whether the package has a maintained fork or successor. If no patched release exists, vendor the code or migrate to an active alternative before the unmaintained code accrues unfixed CVEs.

Evidence

export async function fetchRawGithubContent(rawPath: string) {

  const path = rawPath.replace('/blob', '');

  const response = await fetch(`https://raw.githubusercontent.com${path}`);

  if (!response.ok) {

    throw new Error(

      `Failed to fetch GitHub content: ${response.status} ${response.statusText}`,

Remediation

Pass timeout= on every call: - HTTP: `requests.get(url, timeout=5)`, `httpx.get(url, timeout=5.0)` - Node fetch: `AbortSignal.timeout(5000)` - Subprocess: `subprocess.run(["cmd"], timeout=30, check=True)` Pick a value short enough to fail fast and retry.

Evidence

Use the list_docs_resources tool first to discover available page slugs, then pass the slug to this tool.

    Use this tool when:

    - You have identified a specific docs page to fetch (from list_docs_resources results)

    - You need detailed guidance on a Neon feature, workflow, or configuration

    - The user needs step-by-step instructions for a Neon-related task

  </use_case>

Remediation

Pass timeout= on every call: - HTTP: `requests.get(url, timeout=5)`, `httpx.get(url, timeout=5.0)` - Node fetch: `AbortSignal.timeout(5000)` - Subprocess: `subprocess.run(["cmd"], timeout=30, check=True)` Pick a value short enough to fail fast and retry.

Evidence

}

async function handleListDocsResources() {

  const response = await fetch(NEON_DOCS_INDEX_URL);

  if (!response.ok) {

    if (response.status === 404) {

      throw new NotFoundError('Neon docs index not found');

Remediation

Pass timeout= on every call: - HTTP: `requests.get(url, timeout=5)`, `httpx.get(url, timeout=5.0)` - Node fetch: `AbortSignal.timeout(5000)` - Subprocess: `subprocess.run(["cmd"], timeout=30, check=True)` Pick a value short enough to fail fast and retry.

Evidence

// Ensure the slug ends with .md for the new docs format

  const mdSlug = slug.endsWith('.md') ? slug : `${slug}.md`;

  const url = `${NEON_DOCS_BASE_URL}/${mdSlug}`;

  const response = await fetch(url);

  if (!response.ok) {

    if (response.status === 404) {

      throw new NotFoundError(`Doc page not found: "${mdSlug}"`);

Remediation

Pass timeout= on every call: - HTTP: `requests.get(url, timeout=5)`, `httpx.get(url, timeout=5.0)` - Node fetch: `AbortSignal.timeout(5000)` - Subprocess: `subprocess.run(["cmd"], timeout=30, check=True)` Pick a value short enough to fail fast and retry.

Evidence

});

export const explainSqlStatementInputSchema = z.object({

  sql: z.string().describe('The SQL statement to analyze'),

  projectId: z

    .string()

    .describe('The ID of the project to execute the query against'),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

});

export const prepareQueryTuningInputSchema = z.object({

  sql: z.string().describe('The SQL statement to analyze and tune'),

  databaseName: z

    .string()

    .describe('The name of the database to execute the query against'),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

});

export const runSqlInputSchema = z.object({

  sql: z.string().describe('The SQL query to execute'),

  projectId: z

    .string()

    .describe('The ID of the project to execute the query against'),

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Evidence

return {

    token: bearerToken,

    scopes: ['*'], // API keys get all scopes

    clientId: 'api-key', // Literal string

    extra: {

      account: apiKeyRecord.account,

Remediation

Replace wildcard scopes with specific named scopes: # BAD SCOPES = ["files:*", "all", "*"] # GOOD SCOPES = [ "files:read", "files:write:owned", "tools:call:safe-readers", ] Issue least privilege at the authorization server, request the minimum at the client, and challenge for elevation only when a privileged operation is attempted.