@ooples/token-optimizer-mcp vulnerabilities (npm)

2 vulnerabilities.

• @ooples/token-optimizer-mcp npm Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints CVE-2026-55156 Fix available 5.3 MediumAugust 14, 2026
• @ooples/token-optimizer-mcp npm Token Optimizer MCP: OS command injection in smart_user via username in get-user-info CVE-2026-55157 Fix available 8.4 HighAugust 14, 2026