🚨 Security: Critical issues in mcp-server-neon container

[github-actions]

🚨 Security Scan Alert

A periodic security scan found critical issues in the container image:

• Image: ghcr.io/stacklok/dockyard/npx/mcp-server-neon:0.6.5
• Critical vulnerabilities: 1
• High vulnerabilities: 6
• Secrets detected: 0

Details

See the Security tab for full details.

Critical Vulnerabilities

• GHSA-9qr9-h5gf-34mp in next: Next.js is vulnerable to RCE in React flight protocol

---

Automated security scan from periodic-security-scan workflow

[github-actions]

Updated Scan Results

🚨 Security Scan Alert

A periodic security scan found critical issues in the container image:

• Image: ghcr.io/stacklok/dockyard/npx/mcp-server-neon:0.6.5
• Critical vulnerabilities: 1
• High vulnerabilities: 7
• Secrets detected: 0

Details

See the Security tab for full details.

Critical Vulnerabilities

• GHSA-9qr9-h5gf-34mp in next: Next.js is vulnerable to RCE in React flight protocol

---

Automated security scan from periodic-security-scan workflow

[github-actions]

Updated Scan Results

🚨 Security Scan Alert

A periodic security scan found critical issues in the container image:

• Image: ghcr.io/stacklok/dockyard/npx/mcp-server-neon:0.6.5
• Critical vulnerabilities: 1
• High vulnerabilities: 7
• Secrets detected: 0

Details

See the Security tab for full details.

Critical Vulnerabilities

• CVE-2025-55182 in next: next: React Server Components: Pre-authentication remote code execution via unsafe deserialization

---

Automated security scan from periodic-security-scan workflow

[github-actions]

Updated Scan Results

🚨 Security Scan Alert

A periodic security scan found critical issues in the container image:

• Image: ghcr.io/stacklok/dockyard/npx/mcp-server-neon:0.6.5
• Critical vulnerabilities: 1
• High vulnerabilities: 7
• Secrets detected: 0

Details

See the Security tab for full details.

Critical Vulnerabilities

• CVE-2025-55182 in next: next: React Server Components: Pre-authentication remote code execution via unsafe deserialization

---

Automated security scan from periodic-security-scan workflow

[github-actions]

Updated Scan Results

🚨 Security Scan Alert

A periodic security scan found critical issues in the container image:

• Image: ghcr.io/stacklok/dockyard/npx/mcp-server-neon:0.6.5
• Critical vulnerabilities: 1
• High vulnerabilities: 9
• Secrets detected: 0

Details

See the Security tab for full details.

Critical Vulnerabilities

• CVE-2025-55182 in next: next: React Server Components: Pre-authentication remote code execution via unsafe deserialization

---

Automated security scan from periodic-security-scan workflow