mirror of
https://github.com/czlonkowski/n8n-mcp.git
synced 2026-01-30 06:22:04 +00:00
Enhance input validation for documentation fetcher constructor and replace shell command execution with safer alternatives using argument arrays. Changes: - Add comprehensive path validation with sanitization - Replace execSync with spawnSync using argument arrays - Add HTTPS-only validation for repository URLs - Extend security test coverage Version: 2.18.6 → 2.18.7 Thanks to @ErbaZZ for responsible disclosure. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
24 lines
537 B
JSON
24 lines
537 B
JSON
{
|
|
"name": "n8n-mcp-runtime",
|
|
"version": "2.18.7",
|
|
"description": "n8n MCP Server Runtime Dependencies Only",
|
|
"private": true,
|
|
"dependencies": {
|
|
"@modelcontextprotocol/sdk": "^1.13.2",
|
|
"@supabase/supabase-js": "^2.57.4",
|
|
"express": "^5.1.0",
|
|
"express-rate-limit": "^7.1.5",
|
|
"dotenv": "^16.5.0",
|
|
"lru-cache": "^11.2.1",
|
|
"sql.js": "^1.13.0",
|
|
"uuid": "^10.0.0",
|
|
"axios": "^1.7.7"
|
|
},
|
|
"engines": {
|
|
"node": ">=16.0.0"
|
|
},
|
|
"optionalDependencies": {
|
|
"better-sqlite3": "^11.10.0"
|
|
}
|
|
}
|