This release adds 2 notable features for engineering teams evaluating rollout.
Published 5mo
MCP Security & Auth
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agent-security
ai-agent-security
ai-security
claude-code
codex
cursor
+14 more
hallucination-detection
llm-security
mcp
mcp-security
mcp-server
openclaw
owasp
package-hallucination
prompt-injection
static-analysis
security
supply-chain-security
vulnerability-scanning
windsurf
Summary
AI summaryUpdates Technical Details, Solution, and 1MB across a mixed release.
Full changelog
What's Changed
Timeout Fix for Codex and Large Files
- Increased analysis timeout from 30s to 45s (both daemon and sync fallback)
- Added 1MB file size limit to prevent timeouts on very large files
- Fixes timeout errors when scanning complex TypeScript backend files
Technical Details
- Root cause: compound timeout (daemon 30s + sync fallback 30s = 60s total)
- Solution: Increased
REQUEST_TIMEOUTandexecFileSynctimeout to 45s - Added
MAX_FILE_SIZEcheck (1MB) inscan_securitytool
Changes
src/daemon-client.js: REQUEST_TIMEOUT 30s → 45ssrc/utils.js: execFileSync timeout 30s → 45ssrc/tools/scan-security.js: Add file size check with early skip
Addresses user-reported timeout failures in Codex when scanning TypeScript backend files.
Full Changelog: https://github.com/sinewaveai/agent-security-scanner-mcp/compare/v3.10.2...v3.10.3
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agent Security Scanner Mcp
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]