<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>io.github.cyanheads/osv-advisory-mcp-server · osv-advisory · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] osv-advisory: Tool “osv_query_package” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a0d4ca-846f-728f-98c1-ff06e2e1c981</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a0d4ca-846f-728f-98c1-ff06e2e1c981</guid><description>Tool “osv_query_package” rewrote its description, which is the text the model reads. Compared against 2026-09-24.</description><pubDate>Thu, 24 Sep 2026 19:00:34 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] osv-advisory: Tool “osv_list_ecosystems” rewrote its description, which is the text the model reads</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a0d4ca-846b-7ee3-9683-f2b7f83453e2</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a0d4ca-846b-7ee3-9683-f2b7f83453e2</guid><description>Tool “osv_list_ecosystems” rewrote its description, which is the text the model reads. Compared against 2026-09-24.</description><pubDate>Thu, 24 Sep 2026 19:00:34 GMT</pubDate><category>security</category><category>neutral</category><category>tool.description_changed</category></item><item><title>[SECURITY] osv-advisory: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a083b9-e92c-7717-822f-2ef90eff534b</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a083b9-e92c-7717-822f-2ef90eff534b</guid><description>Stability (0.97 → pass). Compared against 2026-09-08.</description><pubDate>Wed, 09 Sep 2026 01:13:14 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] osv-advisory: Stability (0.97 → pass)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a03678-dd38-7d48-9a1a-2c4e44f49ad1</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_01a03678-dd38-7d48-9a1a-2c4e44f49ad1</guid><description>Stability (0.97 → pass). Compared against 2026-08-24.</description><pubDate>Tue, 25 Aug 2026 01:11:25 GMT</pubDate><category>security</category><category>neutral</category><category>check.verdict</category></item><item><title>[SECURITY] osv-advisory: HSTS header (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fe939-1cf5-7c35-930c-c8163d22f7fe</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fe939-1cf5-7c35-930c-c8163d22f7fe</guid><description>HSTS header (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 01:11:02 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] osv-advisory: Transport (fail → pass)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fe939-1cf6-7824-ad70-ab6cc5b911ae</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fe939-1cf6-7824-ad70-ab6cc5b911ae</guid><description>Transport (fail → pass). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 01:11:02 GMT</pubDate><category>security</category><category>improvement</category><category>check.verdict</category></item><item><title>[SECURITY] osv-advisory: Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fe939-1cf6-7e14-adf6-b9f6bc373016</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fe939-1cf6-7e14-adf6-b9f6bc373016</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to call this server, and 4 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe.). Compared against 2026-08-09.</description><pubDate>Mon, 10 Aug 2026 01:11:02 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] osv-advisory: Stability (0.40 → unverified)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808c-75ce-a30f-b06beaf0ee3f</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808c-75ce-a30f-b06beaf0ee3f</guid><description>Stability (0.40 → unverified). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:11:09 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] osv-advisory: HSTS header (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808c-7b48-a4fe-8b96fb2f60b2</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808c-7b48-a4fe-8b96fb2f60b2</guid><description>HSTS header (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:11:09 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] osv-advisory: Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808d-7263-b9cf-f15ada470116</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808d-7263-b9cf-f15ada470116</guid><description>Authorization (Authorisation not fully verified: no authorisation is required to connect, but we couldn&apos;t read the whole tool list to see what that exposes.). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:11:09 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] osv-advisory: Transport (pass → fail)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808b-7a49-b46d-879a5a174bf5</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808b-7a49-b46d-879a5a174bf5</guid><description>Transport (pass → fail). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:11:09 GMT</pubDate><category>security</category><category>regression</category><category>check.verdict</category></item><item><title>[SECURITY] osv-advisory: Endpoint reachability (reachable → not serving MCP)</title><link>https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808e-7833-af36-877597bcc386</link><guid isPermaLink="true">https://verifymcp.io/servers/cyanheads-osv-advisory-mcp-server/osv-advisory#chg-chg_019fdeec-808e-7833-af36-877597bcc386</guid><description>Endpoint reachability (reachable → not serving MCP). Compared against 2026-08-07.</description><pubDate>Sat, 08 Aug 2026 01:11:09 GMT</pubDate><category>security</category><category>regression</category><category>capture.status_changed</category></item></channel></rss>