Pantheon-Security/notebooklm-mcp-secure

Security Hardening Release

Comprehensive remediation from 4 independent code reviews (Code Quality, Performance, Sustainability, Medusa Security Scan). 23 fixes across 18 files.

Security

• Constant-time auth — token comparison now uses secureCompare (prevents timing attacks)
• Command injection fix — execSync() replaced with execFileSync() in file-permissions
• MCP SDK 1.26.0 — patches HIGH severity cross-client data leak (GHSA-345p-7cg4-v4c7)
• Audit hash chain — increased to 128-bit truncation for collision resistance
• Settings validation — parsed JSON validated before merge (prevents property injection)
• Error sanitization — internal identifiers removed from error messages
• Dockerfile hardened with --no-install-recommends
• Config validation — NOTEBOOK_PROFILE_STRATEGY validated against allowed values

Fixed — Memory & Concurrency

• CONFIG mutation race condition — removed all 6 Object.assign(CONFIG, ...) sites
• RateLimiter memory leak — empty keys now evicted
• FinalizationRegistry — fixed self-reference preventing GC of secure buffers
• Event listener leak — framenavigated listener cleaned up after 30s timeout
• Timer leak — SecureCredential auto-wipe timer now .unref()'d

Performance

• Regex precompilation in sanitizeForLogging (~30-40% faster)
• IPC reduction — detectRateLimitError consolidated from 8+ calls to 1
• O(n) dedup in notebook extraction (was O(n^2))
• ESM import fix — removed inline require('path')

Code Quality

• Version strings unified to use package.json version
• Debounced library save — no longer writes to disk on every query
• ToolResult type safety — default changed from any to unknown

Medusa Scan Analysis

• 107 findings analyzed: 100 false positives, 7 true positives (all fixed)
• Detailed FP analysis documented in medusa-fp-analysis.md

Full Changelog

https://github.com/Pantheon-Security/notebooklm-mcp-secure/compare/v2026.1.11...v2026.1.12