Skip to content

Brand-System/brandsystem-mcp

v0.3.2 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 3mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

ai-agents brand-governance brand-guidelines brand-identity brand-voice claude
+5 more
codex cursor design-tokens mcp model-context-protocol

Affected surfaces

rce_ssrf

Summary

AI summary

DNS rebinding fix closes the TOCTOU window between DNS resolution and TCP connection.

Full changelog

Security

  • DNS rebinding fix: Outbound fetches now pin to the validated IP address on every hop, closing the TOCTOU window between DNS resolution and TCP connection. Uses a custom lookup callback on http.request/https.request so the socket connects to the vetted IP.
  • Centralized path containment: All .brand/ writes and cwd-scoped file reads use a shared assertPathWithinBase() helper, eliminating sibling-prefix traversal escapes.
  • Regression tests: New tests for pinned transport behavior and path traversal edge cases.

Upgrade recommended for all users of v0.3.0 and v0.3.1.

Security Fixes

  • DNS rebinding fix: outbound fetches now pin to the validated IP address on every hop, closing the TOCTOU window between DNS resolution and TCP connection.
  • Centralized path containment: all .brand/ writes and cwd-scoped file reads use a shared assertPathWithinBase() helper, eliminating sibling-prefix traversal escapes.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Brand-System/brandsystem-mcp

Get notified when new releases ship.

Sign up free

About Brand-System/brandsystem-mcp

Make your brand machine-readable. Extract brand identity (colors, fonts, logo, voice, visual rules) from any website via static CSS + rendered-page extraction, compile into DTCG tokens, brand runtime contracts, and interaction policies. 34 tools across 4 progressive sessions. Subscribable `brand://runtime` and `brand://policy` MCP resources. Content compliance scoring (0-100), pass/fail gate, and HTML/CSS preflight. Brandcode Studio connector for hosted brand sync.

All releases →

Related context

Beta — feedback welcome: [email protected]