<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>OpenVibeCoding Read-only MCP · openvibecoding-orchestrator · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator/changelog.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] openvibecoding-orchestrator: CVE-2026-48710 affects this package (medium)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f3-771b-9e04-c0501d1413b7</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f3-771b-9e04-c0501d1413b7</guid><description>CVE-2026-48710 affects this package (medium). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 12:19:09 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: CVE-2026-28684 affects this package (medium)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f5-7c45-8c6d-55510304c8f2</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f5-7c45-8c6d-55510304c8f2</guid><description>CVE-2026-28684 affects this package (medium). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 12:19:09 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: Known CVEs (unverified → fail)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f5-76e7-8771-e0e717e7e512</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f5-76e7-8771-e0e717e7e512</guid><description>Known CVEs (unverified → fail). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 12:19:09 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: CVE-2026-54283 affects this package (medium)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f5-70ef-be33-4f587f2e2978</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f5-70ef-be33-4f587f2e2978</guid><description>CVE-2026-54283 affects this package (medium). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 12:19:09 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: CVE-2026-48818 affects this package (medium)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f4-7b42-a5b2-58aa5467210e</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f4-7b42-a5b2-58aa5467210e</guid><description>CVE-2026-48818 affects this package (medium). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 12:19:09 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: CVE-2026-48817 affects this package (medium)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f4-76f8-b064-e13b3e5e9f38</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f4-76f8-b064-e13b3e5e9f38</guid><description>CVE-2026-48817 affects this package (medium). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 12:19:09 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: CVE-2026-54282 affects this package (medium)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f4-7299-a75b-8fd5724f2ff2</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc790-48f4-7299-a75b-8fd5724f2ff2</guid><description>CVE-2026-54282 affects this package (medium). Compared against 2026-08-02.</description><pubDate>Mon, 03 Aug 2026 12:19:09 GMT</pubDate><category>security</category><category>regression</category><category>advisory.identified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: Install scripts (unverified → pass)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc4d8-51c3-762a-acba-f16066a7131d</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc4d8-51c3-762a-acba-f16066a7131d</guid><description>Install scripts (unverified → pass). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 23:38:58 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: Provenance (unverified → fail)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc4d8-51be-735d-8790-ba66bd9418f4</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc4d8-51be-735d-8790-ba66bd9418f4</guid><description>Provenance (unverified → fail). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 23:38:58 GMT</pubDate><category>security</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: The scripts that run when this package is installed changed (build_backend)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc4d8-51c5-77db-8698-c3bebf9681a0</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc4d8-51c5-77db-8698-c3bebf9681a0</guid><description>The scripts that run when this package is installed changed (build_backend). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 23:38:58 GMT</pubDate><category>security</category><category>neutral</category><category>installscript.hooks_changed</category></item><item><title>[SECURITY] openvibecoding-orchestrator: Malware scan (unverified → pass)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc247-15f8-7516-b18a-2ba5f804998d</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc247-15f8-7516-b18a-2ba5f804998d</guid><description>Malware scan (unverified → pass). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 11:41:06 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] openvibecoding-orchestrator: Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc247-15f8-7b63-ac84-7f40a4e2ad61</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fc247-15f8-7b63-ac84-7f40a4e2ad61</guid><description>Stability (Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.). Compared against 2026-08-01.</description><pubDate>Sun, 02 Aug 2026 11:41:06 GMT</pubDate><category>security</category><category>neutral</category><category>check.reason</category></item><item><title>[SECURITY] openvibecoding-orchestrator: Malware scan (pass → unverified)</title><link>https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fb6a8-08e0-79de-9030-89a4356b78de</link><guid isPermaLink="true">https://verifymcp.io/servers/xiaojiou176-open-openvibecoding-readonly/openvibecoding-orchestrator#chg-chg_019fb6a8-08e0-79de-9030-89a4356b78de</guid><description>Malware scan (pass → unverified). Compared against 2026-07-29.</description><pubDate>Fri, 31 Jul 2026 05:31:33 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item></channel></rss>