Issues

• [Security] MCP-07: Private Key Stored as Immutable String Without Zeroization

  asterdex/aster-mcp#8 · Filter by author mefai-dev opened on Mar 20, 2026

• [Security] MCP-06: Config Directory Created Without Explicit Permissions

  asterdex/aster-mcp#7 · Filter by author mefai-dev opened on Mar 20, 2026

• [Security] MCP-05: Error Messages Propagate Raw Internal Details

  asterdex/aster-mcp#6 · Filter by author mefai-dev opened on Mar 20, 2026

• [Security] MCP-04: No Input Validation on account_id - Account Existence Leakage

  asterdex/aster-mcp#5 · Filter by author mefai-dev opened on Mar 20, 2026

• [Security] MCP-03: Floating-Point Precision Loss in HMAC Client Order Quantities

  asterdex/aster-mcp#4 · Filter by author mefai-dev opened on Mar 20, 2026

• [Security] MCP-02: base_url Accepts Arbitrary URLs - SSRF via Configuration

  asterdex/aster-mcp#3 · Filter by author mefai-dev opened on Mar 20, 2026

• [Security] MCP-01: No MCP Authentication on SSE/HTTP Transport

  asterdex/aster-mcp#2 · Filter by author mefai-dev opened on Mar 20, 2026