Skip to content

CSCSoftware/AiDex

v1.12.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 2mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai-coding claude claude-code code-indexing code-search copilot
+10 more
cursor developer-tools gemini gemini-cli mcp mcp-server sqlite tree-sitter vscode windsurf

Affected surfaces

rce_ssrf

Summary

AI summary

Auto-setup now registers AiDex with all detected AI clients and installs comprehensive instruction files for 27 tools.

Full changelog

What's New

Auto-Setup on Install

npm install -g aidex-mcp now automatically registers AiDex with all detected AI clients (Claude Code, Claude Desktop, Cursor, Windsurf, Gemini CLI, VS Code Copilot) and installs AI instruction files (CLAUDE.md, GEMINI.md). No more manual aidex setup needed.

  • Opt-out: AIDEX_NO_SETUP=1 npm install -g aidex-mcp or CI env var
  • Graceful fallback if auto-setup fails

Comprehensive AI Instructions

The instruction block installed by aidex setup now covers all 27 tools with:

  • Decision tree: .aidex/ exists → STOP, use AiDex instead of Grep
  • Explicit ❌/✅ examples
  • Search modes explained (exact/contains/starts_with)
  • Session notes, task backlog, global search, screenshots — all with examples
  • Duplicate detection: won't add a second block if manual AiDex instructions exist

Code Refactoring

  • Extracted shared utilities (shared.ts, global-shared.ts) — ~200 lines of boilerplate eliminated across 10 command files
  • DB fixes: transactions for bulk operations, N+1→batch query, stats 7→1 query
  • SQL injection fix in global-signatures.ts

Full Changelog: https://github.com/CSCSoftware/AiDex/blob/master/CHANGELOG.md

Security Fixes

  • SQL injection fix in `global-signatures.ts`

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track CSCSoftware/AiDex

Get notified when new releases ship.

Sign up free

About CSCSoftware/AiDex

Persistent code index MCP server using Tree-sitter for fast, precise code search. Replaces grep with ~50 token responses instead of 2000+. Supports 11 languages including C#, TypeScript, Python, Rust, and Go.

All releases →

Beta — feedback welcome: [email protected]