Add MseeP.ai badge

[mseep-ai]

Hi there,

This pull request shares a security update on paystack-mcp-server.

We also have an entry for paystack-mcp-server in our directory, MseeP.ai, where we provide regular security and trust updates on your app.

We invite you to add our badge for your MCP server to your README to help your users learn from a third party that provides ongoing validation of paystack-mcp-server.

You can easily take control over your listing for free: visit it at https://mseep.ai/app/paystackoss-paystack-mcp-server.

Thanks,

The MseeP Team
MCP servers you can trust

---

Here are our latest evaluation results of paystack-mcp-server

Security Scan Results

Security Score: 78/100

Risk Level: moderate

Scan Date: 2026-07-21

Score starts at 100, deducts points for security issues, and adds points for security best practices

Detected Vulnerabilities

High Severity

• concurrently

  • ['shell-quote']
  • Fixed in version: unknown

• shell-quote

  • [{'source': 1120422, 'name': 'shell-quote', 'dependency': 'shell-quote', 'title': 'shell-quote quote() does not escape newlines in object .op values', 'url': 'https://github.com/advisories/GHSA-w7jw-789q-3m8p', 'severity': 'critical', 'cwe': ['CWE-77', 'CWE-78'], 'cvss': {'score': 8.1, 'vectorString': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}, 'range': '>=1.1.0 <=1.8.3'}, {'source': 1123944, 'name': 'shell-quote', 'dependency': 'shell-quote', 'title': 'shell-quote: Quadratic-complexity Denial of Service in parse() (CWE-407)', 'url': 'https://github.com/advisories/GHSA-395f-4hp3-45gv', 'severity': 'high', 'cwe': ['CWE-407'], 'cvss': {'score': 7.5, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}, 'range': '<=1.8.4'}]
  • Fixed in version: unknown

Medium Severity

• @hono/node-server

  • [{'source': 1114170, 'name': '@hono/node-server', 'dependency': '@hono/node-server', 'title': '@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware', 'url': 'https://github.com/advisories/GHSA-wc8c-qw6v-h7f6', 'severity': 'high', 'cwe': ['CWE-863'], 'cvss': {'score': 7.5, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}, 'range': '<1.19.10'}, {'source': 1116281, 'name': '@hono/node-server', 'dependency': '@hono/node-server', 'title': '@hono/node-server: Middleware bypass via repeated slashes in serveStatic', 'url': 'https://github.com/advisories/GHSA-92pp-h63x-v22m', 'severity': 'moderate', 'cwe': ['CWE-22'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}, 'range': '<1.19.13'}]
  • Fixed in version: unknown

• brace-expansion

  • [{'source': 1115540, 'name': 'brace-expansion', 'dependency': 'brace-expansion', 'title': 'brace-expansion: Zero-step sequence causes process hang and memory exhaustion', 'url': 'https://github.com/advisories/GHSA-f886-m6hf-6m8v', 'severity': 'moderate', 'cwe': ['CWE-400'], 'cvss': {'score': 6.5, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}, 'range': '<1.1.13'}, {'source': 1115541, 'name': 'brace-expansion', 'dependency': 'brace-expansion', 'title': 'brace-expansion: Zero-step sequence causes process hang and memory exhaustion', 'url': 'https://github.com/advisories/GHSA-f886-m6hf-6m8v', 'severity': 'moderate', 'cwe': ['CWE-400'], 'cvss': {'score': 6.5, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}, 'range': '>=2.0.0 <2.0.3'}, {'source': 1120311, 'name': 'brace-expansion', 'dependency': 'brace-expansion', 'title': 'brace-expansion: Large numeric range defeats documented max DoS protection', 'url': 'https://github.com/advisories/GHSA-jxxr-4gwj-5jf2', 'severity': 'moderate', 'cwe': ['CWE-400'], 'cvss': {'score': 6.5, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}, 'range': '>=5.0.0 <5.0.6'}, {'source': 1123896, 'name': 'brace-expansion', 'dependency': 'brace-expansion', 'title': 'brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups', 'url': 'https://github.com/advisories/GHSA-3jxr-9vmj-r5cp', 'severity': 'high', 'cwe': ['CWE-400', 'CWE-407'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}, 'range': '>=2.0.0 <2.1.2'}, {'source': 1123897, 'name': 'brace-expansion', 'dependency': 'brace-expansion', 'title': 'brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups', 'url': 'https://github.com/advisories/GHSA-3jxr-9vmj-r5cp', 'severity': 'high', 'cwe': ['CWE-400', 'CWE-407'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}, 'range': '<1.1.16'}, {'source': 1123898, 'name': 'brace-expansion', 'dependency': 'brace-expansion', 'title': 'brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups', 'url': 'https://github.com/advisories/GHSA-3jxr-9vmj-r5cp', 'severity': 'high', 'cwe': ['CWE-400', 'CWE-407'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}, 'range': '>=3.0.0 <5.0.7'}]
  • Fixed in version: unknown

• fast-uri

  • [{'source': 1117870, 'name': 'fast-uri', 'dependency': 'fast-uri', 'title': 'fast-uri vulnerable to path traversal via percent-encoded dot segments', 'url': 'https://github.com/advisories/GHSA-q3j6-qgpj-74h6', 'severity': 'high', 'cwe': ['CWE-22'], 'cvss': {'score': 7.5, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}, 'range': '<=3.1.0'}, {'source': 1117884, 'name': 'fast-uri', 'dependency': 'fast-uri', 'title': 'fast-uri vulnerable to host confusion via percent-encoded authority delimiters', 'url': 'https://github.com/advisories/GHSA-v39h-62p7-jpjc', 'severity': 'high', 'cwe': ['CWE-436'], 'cvss': {'score': 7.5, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}, 'range': '<=3.1.1'}]
  • Fixed in version: unknown

• ... and 14 more medium severity vulnerabilities

This security assessment was conducted by MseeP.ai, an independent security validation service for MCP servers. Visit our website to learn more about our security reviews.