Repository navigation

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
<3.9.1	❌
3.9.1+	✅

Reporting a Vulnerability

Join Discord or Telegram to report a vulnerability

A single anonymous MCP session can monopolize HTTP mode and deny new clients
GHSA-h7c4-q426-7jh9 published Jul 10, 2026 by matteobruni

Moderate
Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process
GHSA-4p8p-pjpq-2w7h published Jul 10, 2026 by matteobruni

High
Generated release notes can execute shell commands in the stable publish workflow
GHSA-gw8q-3x59-mjjx published Jul 10, 2026 by matteobruni

High
Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS
GHSA-447x-qqwf-m7xq published Jul 2, 2026 by matteobruni

High

Learn more about advisories related to tsparticles/tsparticles in the GitHub Advisory Database