Skip to content

Brand-System/brandsystem-mcp

v0.3.1 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 3mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

ai-agents brand-governance brand-guidelines brand-identity brand-voice claude
+5 more
codex cursor design-tokens mcp model-context-protocol

Affected surfaces

rce_ssrf

Summary

AI summary

Fixed path traversal and SSRF vulnerabilities and added response size and feedback rate limits.

Full changelog

Security

  • Path traversal fix: brand_audit_content, brand_check_compliance, and brand_audit_drift accepted file paths without cwd validation. An agent could read any .html/.md/.txt file on the filesystem. Now all three resolve paths relative to cwd and reject escapes.
  • SSRF bypass fix: brand_extract_messaging used bare fetch() instead of safeFetch(), bypassing all SSRF protection. Now all outbound HTTP goes through safeFetch().
  • Response size limits: HTML responses capped at 5MB, CSS at 1MB per stylesheet. Prevents memory exhaustion from malicious URLs.
  • Feedback rate limiting: Max 5 entries/minute, 100 total files. Prevents disk exhaustion from agent flooding.

Security Fixes

  • Path traversal fix: brand_audit_content, brand_check_compliance, and brand_audit_drift now resolve file paths relative to cwd and reject path escapes.
  • SSRF bypass fix: brand_extract_messaging now uses safeFetch() for all outbound HTTP requests.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Brand-System/brandsystem-mcp

Get notified when new releases ship.

Sign up free

About Brand-System/brandsystem-mcp

Make your brand machine-readable. Extract brand identity (colors, fonts, logo, voice, visual rules) from any website via static CSS + rendered-page extraction, compile into DTCG tokens, brand runtime contracts, and interaction policies. 34 tools across 4 progressive sessions. Subscribable `brand://runtime` and `brand://policy` MCP resources. Content compliance scoring (0-100), pass/fail gate, and HTML/CSS preflight. Brandcode Studio connector for hosted brand sync.

All releases →

Related context

Beta — feedback welcome: [email protected]