# io.github.jordanburke/joplin-mcp-server

> Search, read, create, edit and sync Joplin notes and notebooks via a headless Joplin sidecar.

- name: io.github.jordanburke/joplin-mcp-server
- version: 2.3.3
- connection class: L0 (run_local_package)
- trust: 87/100
- quality: –/100 (not scored)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.jordanburke%2Fjoplin-mcp-server
- tools: https://api.protogrid.dev/v1/servers/io.github.jordanburke%2Fjoplin-mcp-server/tools

**Runs on your machine: something must execute the package.** Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "joplin-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "joplin-mcp-server@2.3.3"
      ],
      "env": {
        "JOPLIN_TOKEN": "${JOPLIN_TOKEN}",
        "JOPLIN_SYNC_PASSWORD": "${JOPLIN_SYNC_PASSWORD}"
      }
    }
  }
}
```

Placeholders to fill: `${JOPLIN_TOKEN}`, `${JOPLIN_SYNC_PASSWORD}`.

## Trust

- hygiene: 100
- liveness: n/a
- freshness: 85
- provenance: 80
- drivers: +repository +namespace-matches-repo ~liveness-unmeasured ~updated-51d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality –/100 (not scored)

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

### protocol: n/a (weight 25)

- n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only)

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: n/a (weight 30)

- n/a `tools.descriptions`, `tools.description_length`, `tools.schemas`, `tools.annotations`, `tools.directory_hints`, `tools.token_cost`, `tools.api_dump`: tool list unknown (behind auth, not probed, or empty)

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool list unknown

### dependencies: 33 (weight 15)

- fail `deps.known_vulns`: 39 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-7q85-xj36-vmfc in adm-zip@0.5.17 (indirect, fixed in 0.6.1), GHSA-8238-w5pm-2374 in adm-zip@0.5.17 (indirect, fixed in 0.6.1), GHSA-j5f4-cc29-5x44 in adm-zip@0.5.17 (indirect, fixed in 0.6.1), ...; 41 more of lower severity or without a fix
- fail `deps.mcp_sdk_version`: @modelcontextprotocol/client 2.1.0 has 2 known advisories (GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/client to 2.3.0 or later
- pass `deps.resolvable`: joplin-mcp-server@2.3.3 resolved: 883 packages

- tools: unknown
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.jordanburke/joplin-mcp-server.svg)](https://protogrid.dev/servers/io.github.jordanburke/joplin-mcp-server)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- npm joplin-mcp-server@2.3.3: resolved, 882 dependencies, MCP SDK @modelcontextprotocol/sdk 1.30.1
  - GHSA-fjxv-7rqg-78g4 (critical) in `` form-data@2.3.3 ``, indirect, fixed in `` 2.5.4 ``, advisory summary: "form-data uses unsafe random function in form-data for choosing boundary" https://osv.dev/vulnerability/GHSA-fjxv-7rqg-78g4
  - GHSA-23hp-3jrh-7fpw (critical) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.19 ``, advisory summary: "node-tar: Decompression/parse DoS via unlimited input" https://osv.dev/vulnerability/GHSA-23hp-3jrh-7fpw
  - GHSA-23hp-3jrh-7fpw (critical) in `` tar@7.5.15 ``, indirect, fixed in `` 7.5.19 ``, advisory summary: "node-tar: Decompression/parse DoS via unlimited input" https://osv.dev/vulnerability/GHSA-23hp-3jrh-7fpw
  - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/client@2.1.0 ``, indirect, fixed in `` 2.2.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h
  - GHSA-22jm-h49p-29qw (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.32.0 ``, advisory summary: "MCP TypeScript SDK: Experimental tasks were not tied to the session that created them" https://osv.dev/vulnerability/GHSA-22jm-h49p-29qw
  - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.31.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h
  - GHSA-7q85-xj36-vmfc (high) in `` adm-zip@0.5.17 ``, indirect, fixed in `` 0.6.1 ``, advisory summary: "adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)" https://osv.dev/vulnerability/GHSA-7q85-xj36-vmfc
  - GHSA-8238-w5pm-2374 (high) in `` adm-zip@0.5.17 ``, indirect, fixed in `` 0.6.1 ``, advisory summary: "adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)" https://osv.dev/vulnerability/GHSA-8238-w5pm-2374
  - GHSA-j5f4-cc29-5x44 (high) in `` adm-zip@0.5.17 ``, indirect, fixed in `` 0.6.1 ``, advisory summary: "adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -\> local privilege escalation" https://osv.dev/vulnerability/GHSA-j5f4-cc29-5x44
  - GHSA-rcw4-f5rp-g42v (high) in `` adm-zip@0.5.17 ``, indirect, fixed in `` 0.6.1 ``, advisory summary: "adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0" https://osv.dev/vulnerability/GHSA-rcw4-f5rp-g42v
  - GHSA-xcpc-8h2w-3j85 (high) in `` adm-zip@0.5.17 ``, indirect, fixed in `` 0.6.0 ``, advisory summary: "adm-zip: Crafted ZIP file triggers 4GB memory allocation" https://osv.dev/vulnerability/GHSA-xcpc-8h2w-3j85
  - GHSA-8gc5-j5rx-235r (high) in `` fast-xml-parser@4.1.2 ``, indirect, fixed in `` 4.5.5 ``, advisory summary: "fast-xml-parser affected by numeric entity expansion bypassing all entity expansion limits (incomplete fix for CVE-2026-26278)" https://osv.dev/vulnerability/GHSA-8gc5-j5rx-235r
  - GHSA-8r9p-f939-6h3c (high) in `` follow-redirects@1.16.0 ``, indirect, fixed in `` 1.16.1 ``, advisory summary: "follow-redirects sensitiveHeaders regex escaping can expose credential headers" https://osv.dev/vulnerability/GHSA-8r9p-f939-6h3c
  - GHSA-q3jh-wrc6-jgq8 (high) in `` follow-redirects@1.16.0 ``, indirect, fixed in `` 1.16.1 ``, advisory summary: "follow-redirects array-form headers bypass cross-origin credential stripping" https://osv.dev/vulnerability/GHSA-q3jh-wrc6-jgq8
  - GHSA-hmw2-7cc7-3qxx (high) in `` form-data@2.3.3 ``, indirect, fixed in `` 2.5.6 ``, advisory summary: "form-data: CRLF injection in form-data via unescaped multipart field names and filenames" https://osv.dev/vulnerability/GHSA-hmw2-7cc7-3qxx
  - GHSA-hmw2-7cc7-3qxx (high) in `` form-data@4.0.5 ``, indirect, fixed in `` 4.0.6 ``, advisory summary: "form-data: CRLF injection in form-data via unescaped multipart field names and filenames" https://osv.dev/vulnerability/GHSA-hmw2-7cc7-3qxx
  - GHSA-w3rx-r6r6-pgpr (high) in `` image-size@1.0.0 ``, indirect, fixed in `` 2.0.3 ``, advisory summary: "image-size: ICNS parser allows denial of service through an infinite loop" https://osv.dev/vulnerability/GHSA-w3rx-r6r6-pgpr
  - GHSA-2883-xcg3-v3hh (high) in `` js-yaml@4.1.1 ``, indirect, fixed in `` 4.3.2 ``, advisory summary: "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources" https://osv.dev/vulnerability/GHSA-2883-xcg3-v3hh
  - GHSA-52cp-r559-cp3m (high) in `` js-yaml@4.1.1 ``, indirect, fixed in `` 4.3.0 ``, advisory summary: "js-yaml: YAML merge-key chains can force quadratic CPU consumption" https://osv.dev/vulnerability/GHSA-52cp-r559-cp3m
  - GHSA-5p4m-2wfm-xmqj (high) in `` js-yaml@4.1.1 ``, indirect, fixed in `` 4.3.1 ``, advisory summary: "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported" https://osv.dev/vulnerability/GHSA-5p4m-2wfm-xmqj
  - GHSA-22p9-wv53-3rq4 (high) in `` linkify-it@4.0.1 ``, indirect, fixed in `` 5.0.1 ``, advisory summary: "LinkifyIt\#match scan loop has quadratic algorithmic complexity" https://osv.dev/vulnerability/GHSA-22p9-wv53-3rq4
  - GHSA-v245-v573-v5vm (high) in `` linkify-it@4.0.1 ``, indirect, fixed in `` 5.0.2 ``, advisory summary: "linkify-it: Quadratic-complexity DoS via the \`mailto:\` validator scan-loop on attacker text" https://osv.dev/vulnerability/GHSA-v245-v573-v5vm
  - GHSA-r7fv-28h4-cvq7 (high) in `` markdown-it@13.0.2 ``, indirect, fixed in `` 14.3.2 ``, advisory summary: "markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes" https://osv.dev/vulnerability/GHSA-r7fv-28h4-cvq7
  - GHSA-65x3-rw7q-gx94 (high) in `` multiparty@4.2.3 ``, indirect, fixed in `` 4.3.0 ``, advisory summary: "multiparty vulnerable to ReDoS via filename parsing" https://osv.dev/vulnerability/GHSA-65x3-rw7q-gx94
  - GHSA-qxch-whhj-8956 (high) in `` multiparty@4.2.3 ``, indirect, fixed in `` 4.3.0 ``, advisory summary: "multiparty: Denial of Service via Prototype Pollution leads to Uncaught Exception" https://osv.dev/vulnerability/GHSA-qxch-whhj-8956
  - GHSA-xh3c-6gcq-g4rv (high) in `` multiparty@4.2.3 ``, indirect, fixed in `` 4.3.0 ``, advisory summary: "multiparty vulnerable to Denial of Service via Uncaught Exception in filename\* parameter parsing" https://osv.dev/vulnerability/GHSA-xh3c-6gcq-g4rv
  - GHSA-28wg-ghj8-5hjv (high) in `` nanoid@5.1.11 ``, indirect, fixed in `` 5.1.16 ``, advisory summary: "nanoid: non-secure generators can loop indefinitely with negative size" https://osv.dev/vulnerability/GHSA-28wg-ghj8-5hjv
  - GHSA-f88m-g3jw-g9cj (high) in `` sharp@0.34.5 ``, indirect, fixed in `` 0.35.0 ``, advisory summary: "sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591" https://osv.dev/vulnerability/GHSA-f88m-g3jw-g9cj
  - GHSA-rgj7-g3m4-5g8c (high) in `` sharp@0.34.5 ``, indirect, fixed in `` 0.35.4 ``, advisory summary: "sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545" https://osv.dev/vulnerability/GHSA-rgj7-g3m4-5g8c
  - GHSA-wq5f-xc86-pv6w (high) in `` sharp@0.34.5 ``, indirect, fixed in `` 0.35.5 ``, advisory summary: "sharp : Vulnerability in librsvg dependency CVE-2026-96889" https://osv.dev/vulnerability/GHSA-wq5f-xc86-pv6w
  - GHSA-pfrm-4rjw-g9q5 (high) in `` string-kit@0.11.10 ``, indirect, fixed in `` 0.12.8 ``, advisory summary: "string-kit Inefficient Regular Expression Complexity vulnerability" https://osv.dev/vulnerability/GHSA-pfrm-4rjw-g9q5
  - GHSA-34x7-hfp2-rc4v (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.7 ``, advisory summary: "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal" https://osv.dev/vulnerability/GHSA-34x7-hfp2-rc4v
  - GHSA-83g3-92jg-28cx (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.8 ``, advisory summary: "Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction" https://osv.dev/vulnerability/GHSA-83g3-92jg-28cx
  - GHSA-8qq5-rm4j-mr97 (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.3 ``, advisory summary: "node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization" https://osv.dev/vulnerability/GHSA-8qq5-rm4j-mr97
  - GHSA-8x88-c5mf-7j5w (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.18 ``, advisory summary: "node-tar: Negative tar entry size causes infinite loop in archive replace" https://osv.dev/vulnerability/GHSA-8x88-c5mf-7j5w
  - GHSA-8x88-c5mf-7j5w (high) in `` tar@7.5.15 ``, indirect, fixed in `` 7.5.18 ``, advisory summary: "node-tar: Negative tar entry size causes infinite loop in archive replace" https://osv.dev/vulnerability/GHSA-8x88-c5mf-7j5w
  - GHSA-9ppj-qmqm-q256 (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.11 ``, advisory summary: "node-tar Symlink Path Traversal via Drive-Relative Linkpath" https://osv.dev/vulnerability/GHSA-9ppj-qmqm-q256
  - GHSA-qffp-2rhf-9h96 (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.10 ``, advisory summary: "tar has Hardlink Path Traversal via Drive-Relative Linkpath" https://osv.dev/vulnerability/GHSA-qffp-2rhf-9h96
  - GHSA-r292-9mhp-454m (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.21 ``, advisory summary: "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection" https://osv.dev/vulnerability/GHSA-r292-9mhp-454m
  - GHSA-r292-9mhp-454m (high) in `` tar@7.5.15 ``, indirect, fixed in `` 7.5.21 ``, advisory summary: "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection" https://osv.dev/vulnerability/GHSA-r292-9mhp-454m
  - GHSA-r6q2-hw4h-h46w (high) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.4 ``, advisory summary: "Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS" https://osv.dev/vulnerability/GHSA-r6q2-hw4h-h46w
  - GHSA-wxgh-8gmr-3qh3 (high) in `` terminal-kit@1.49.4 ``, indirect, fixed in `` 2.1.8 ``, advisory summary: "terminal-kit Inefficient Regular Expression Complexity vulnerability" https://osv.dev/vulnerability/GHSA-wxgh-8gmr-3qh3
  - GHSA-vfj7-8cjw-p6xm (high) in `` braces@3.0.3 ``, indirect, no fix yet, advisory summary: "braces vulnerable to stack-exhaustion denial of service through deeply nested patterns" https://osv.dev/vulnerability/GHSA-vfj7-8cjw-p6xm
  - GHSA-pfq8-rq6v-vf5m (high) in `` html-minifier@4.0.0 ``, indirect, no fix yet, advisory summary: "kangax html-minifier REDoS vulnerability" https://osv.dev/vulnerability/GHSA-pfq8-rq6v-vf5m
  - GHSA-ch52-4w7c-c8xp (high) in `` http-cache-semantics@4.2.0 ``, indirect, no fix yet, advisory summary: "http-cache-semantics max-stale handling can disclose cross-user cached responses" https://osv.dev/vulnerability/GHSA-ch52-4w7c-c8xp
  - GHSA-6prh-2h8m-c8cw (moderate) in `` @modelcontextprotocol/client@2.1.0 ``, indirect, fixed in `` 2.3.0 ``, advisory summary: "MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies" https://osv.dev/vulnerability/GHSA-6prh-2h8m-c8cw
  - GHSA-6prh-2h8m-c8cw (moderate) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.32.0 ``, advisory summary: "MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies" https://osv.dev/vulnerability/GHSA-6prh-2h8m-c8cw
  - GHSA-c6fg-446q-cg94 (moderate) in `` adm-zip@0.5.17 ``, indirect, fixed in `` 0.6.1 ``, advisory summary: "adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path" https://osv.dev/vulnerability/GHSA-c6fg-446q-cg94
  - GHSA-p634-w6r4-rjp2 (moderate) in `` adm-zip@0.5.17 ``, indirect, fixed in `` 0.6.1 ``, advisory summary: "adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content" https://osv.dev/vulnerability/GHSA-p634-w6r4-rjp2
  - GHSA-vcc3-ghjq-m6fr (moderate) in `` decode-uri-component@0.2.2 ``, indirect, fixed in `` 0.5.0 ``, advisory summary: "decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input" https://osv.dev/vulnerability/GHSA-vcc3-ghjq-m6fr
  - GHSA-gh4j-gqv2-49f6 (moderate) in `` fast-xml-parser@3.21.1 ``, indirect, fixed in `` 5.7.0 ``, advisory summary: "fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters" https://osv.dev/vulnerability/GHSA-gh4j-gqv2-49f6
  - GHSA-gh4j-gqv2-49f6 (moderate) in `` fast-xml-parser@4.1.2 ``, indirect, fixed in `` 5.7.0 ``, advisory summary: "fast-xml-parser XMLBuilder: XML Comment and CDATA Injection via Unescaped Delimiters" https://osv.dev/vulnerability/GHSA-gh4j-gqv2-49f6
  - GHSA-jp2q-39xq-3w4g (moderate) in `` fast-xml-parser@4.1.2 ``, indirect, fixed in `` 4.5.5 ``, advisory summary: "Entity Expansion Limits Bypassed When Set to Zero Due to JavaScript Falsy Evaluation in fast-xml-parser" https://osv.dev/vulnerability/GHSA-jp2q-39xq-3w4g
  - GHSA-x3cc-x39p-42qx (moderate) in `` fast-xml-parser@3.21.1 ``, indirect, fixed in `` 4.1.2 ``, advisory summary: "fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name" https://osv.dev/vulnerability/GHSA-x3cc-x39p-42qx
  - GHSA-5v7r-6r5c-r473 (moderate) in `` file-type@16.5.4 ``, indirect, fixed in `` 21.3.1 ``, advisory summary: "file-type affected by infinite loop in ASF parser on malformed input with zero-size sub-header" https://osv.dev/vulnerability/GHSA-5v7r-6r5c-r473
  - GHSA-7wwv-vh3v-89cq (moderate) in `` highlight.js@9.12.0 ``, indirect, fixed in `` 10.4.1 ``, advisory summary: "ReDOS vulnerabities: multiple grammars" https://osv.dev/vulnerability/GHSA-7wwv-vh3v-89cq
  - GHSA-vfrc-7r7c-w9mx (moderate) in `` highlight.js@9.12.0 ``, indirect, fixed in `` 9.18.2 ``, advisory summary: "Prototype Pollution in highlight.js" https://osv.dev/vulnerability/GHSA-vfrc-7r7c-w9mx
  - GHSA-5r4p-p66f-jhc7 (moderate) in `` hono@4.13.9 ``, indirect, fixed in `` 4.13.11 ``, advisory summary: "Hono: \`serveStatic\` decodes the request path a second time, leading to bypass of middleware on static paths" https://osv.dev/vulnerability/GHSA-5r4p-p66f-jhc7
  - GHSA-h67p-54hq-rp68 (moderate) in `` js-yaml@4.1.1 ``, indirect, fixed in `` 4.2.0 ``, advisory summary: "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases" https://osv.dev/vulnerability/GHSA-h67p-54hq-rp68
  - GHSA-253c-mchw-3w2r (moderate) in `` markdown-it@13.0.2 ``, indirect, fixed in `` 14.3.1 ``, advisory summary: "markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds" https://osv.dev/vulnerability/GHSA-253c-mchw-3w2r
  - GHSA-38c4-r59v-3vqw (moderate) in `` markdown-it@13.0.2 ``, indirect, fixed in `` 14.1.1 ``, advisory summary: "markdown-it is has a Regular Expression Denial of Service (ReDoS)" https://osv.dev/vulnerability/GHSA-38c4-r59v-3vqw
  - GHSA-6v5v-wf23-fmfq (moderate) in `` markdown-it@13.0.2 ``, indirect, fixed in `` 14.2.0 ``, advisory summary: "markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations" https://osv.dev/vulnerability/GHSA-6v5v-wf23-fmfq
  - GHSA-4p3w-j4w9-5jqw (moderate) in `` moment@2.30.1 ``, indirect, fixed in `` 2.31.0 ``, advisory summary: "moment vulnerable to Path Traversal via crafted non-string locale name" https://osv.dev/vulnerability/GHSA-4p3w-j4w9-5jqw
  - GHSA-4mjr-xmp4-gh2g (moderate) in `` qs@6.5.5 ``, indirect, fixed in `` 6.16.0 ``, advisory summary: "qs: Denial of Service via Attacker Controlled isBuffer" https://osv.dev/vulnerability/GHSA-4mjr-xmp4-gh2g
  - GHSA-6rw7-vpxm-498p (moderate) in `` qs@6.5.5 ``, indirect, fixed in `` 6.14.1 ``, advisory summary: "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion" https://osv.dev/vulnerability/GHSA-6rw7-vpxm-498p
  - GHSA-gvwx-54wh-qm9j (moderate) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.17 ``, advisory summary: "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records" https://osv.dev/vulnerability/GHSA-gvwx-54wh-qm9j
  - GHSA-gvwx-54wh-qm9j (moderate) in `` tar@7.5.15 ``, indirect, fixed in `` 7.5.17 ``, advisory summary: "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records" https://osv.dev/vulnerability/GHSA-gvwx-54wh-qm9j
  - GHSA-vmf3-w455-68vh (moderate) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.16 ``, advisory summary: "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)" https://osv.dev/vulnerability/GHSA-vmf3-w455-68vh
  - GHSA-vmf3-w455-68vh (moderate) in `` tar@7.5.15 ``, indirect, fixed in `` 7.5.16 ``, advisory summary: "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)" https://osv.dev/vulnerability/GHSA-vmf3-w455-68vh
  - GHSA-w8wr-v893-vjvp (moderate) in `` tar@6.2.1 ``, indirect, fixed in `` 7.5.18 ``, advisory summary: "node-tar: Process crash via PAX numeric path type confusion" https://osv.dev/vulnerability/GHSA-w8wr-v893-vjvp
  - GHSA-w8wr-v893-vjvp (moderate) in `` tar@7.5.15 ``, indirect, fixed in `` 7.5.18 ``, advisory summary: "node-tar: Process crash via PAX numeric path type confusion" https://osv.dev/vulnerability/GHSA-w8wr-v893-vjvp
  - GHSA-72xf-g2v4-qvf3 (moderate) in `` tough-cookie@2.5.0 ``, indirect, fixed in `` 4.1.3 ``, advisory summary: "tough-cookie Prototype Pollution vulnerability" https://osv.dev/vulnerability/GHSA-72xf-g2v4-qvf3
  - GHSA-w5hq-g745-h8pq (moderate) in `` uuid@3.4.0 ``, indirect, fixed in `` 11.1.1 ``, advisory summary: "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided" https://osv.dev/vulnerability/GHSA-w5hq-g745-h8pq
  - GHSA-w5hq-g745-h8pq (moderate) in `` uuid@8.0.0 ``, indirect, fixed in `` 11.1.1 ``, advisory summary: "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided" https://osv.dev/vulnerability/GHSA-w5hq-g745-h8pq
  - GHSA-w5hq-g745-h8pq (moderate) in `` uuid@8.3.2 ``, indirect, fixed in `` 11.1.1 ``, advisory summary: "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided" https://osv.dev/vulnerability/GHSA-w5hq-g745-h8pq
  - GHSA-776f-qx25-q3cc (moderate) in `` xml2js@0.4.19 ``, indirect, fixed in `` 0.5.0 ``, advisory summary: "xml2js is vulnerable to prototype pollution" https://osv.dev/vulnerability/GHSA-776f-qx25-q3cc
  - GHSA-776f-qx25-q3cc (moderate) in `` xml2js@0.4.23 ``, indirect, fixed in `` 0.5.0 ``, advisory summary: "xml2js is vulnerable to prototype pollution" https://osv.dev/vulnerability/GHSA-776f-qx25-q3cc
  - GHSA-p9pc-299p-vxgp (moderate) in `` yargs-parser@7.0.0 ``, indirect, fixed in `` 13.1.2 ``, advisory summary: "yargs-parser Vulnerable to Prototype Pollution" https://osv.dev/vulnerability/GHSA-p9pc-299p-vxgp
  - GHSA-vwc7-r8mq-g2x9 (moderate) in `` adm-zip@0.5.17 ``, indirect, no fix yet, advisory summary: "adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite" https://osv.dev/vulnerability/GHSA-vwc7-r8mq-g2x9
  - GHSA-p8p7-x288-28g6 (moderate) in `` request@2.88.2 ``, indirect, no fix yet, advisory summary: "Server-Side Request Forgery in Request" https://osv.dev/vulnerability/GHSA-p8p7-x288-28g6
  - GHSA-hp3w-g68c-fv3c (moderate) in `` sprintf-js@1.1.3 ``, indirect, no fix yet, advisory summary: "sprintf-js vulnerable to denial of service through unbounded precision specifiers" https://osv.dev/vulnerability/GHSA-hp3w-g68c-fv3c
  - GHSA-vpq2-c234-7xj6 (low) in `` @tootallnate/once@1.1.2 ``, indirect, fixed in `` 2.0.1 ``, advisory summary: "@tootallnate/once vulnerable to Incorrect Control Flow Scoping" https://osv.dev/vulnerability/GHSA-vpq2-c234-7xj6
  - GHSA-fj3w-jwp8-x2g3 (low) in `` fast-xml-parser@4.1.2 ``, indirect, fixed in `` 4.5.4 ``, advisory summary: "fast-xml-parser has stack overflow in XMLBuilder with preserveOrder" https://osv.dev/vulnerability/GHSA-fj3w-jwp8-x2g3
  - GHSA-238p-pmpm-9mq7 (low) in `` katex@0.16.23 ``, indirect, fixed in `` 0.18.2 ``, advisory summary: "KaTeX: Existing prototype pollution can bypass trust restrictions" https://osv.dev/vulnerability/GHSA-238p-pmpm-9mq7
  - GHSA-j965-2qgj-vjmq (low) in `` aws-sdk@2.1340.0 ``, indirect, no fix yet, advisory summary: "JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3" https://osv.dev/vulnerability/GHSA-j965-2qgj-vjmq

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

_none_

## Packages

- npm joplin-mcp-server@2.3.3 secrets: JOPLIN_TOKEN, JOPLIN_SYNC_PASSWORD

## Tools (0)

_none observed_