# Reported issues for AIShield Security Scanner

Pod holds 18 of 19 problems reported by people outside the maintainer team. Issues filed by the project's own owners, members and collaborators are excluded entirely — a maintainer's release checklist is not a warning to a prospective user.

Back to [AIShield Security Scanner](/mcp/aishield-security-scanner).

## Most discussed

### 🟠 [P1] 新增 5 条高危 AI Agent 漏洞

<!--aishield-fp:new-high-vulns-->
**级别：** 🟠 P1
**首次触发：** `2026-08-28T23:55:54.881294+00:00`
**指纹：** `new-high-vulns`

---

权威漏洞库本轮新增 **5** 条 critical/high 级漏洞，涉及 MCP / AI Agent 攻击面：

- **[HIGH] GHSA-86m2-fcxq-5q7c** — 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF
  影响：`npm:9router`
- **[HIGH] GHSA-8gmq-j984-vp4r** — 9router: Unauthenticated LLM proxy access via /codex rewrite authorization bypass
  影响：`npm:9router`
- **[HIGH] GHSA-ffg3-p8fm-mjx2** 

[Read the thread](https://github.com/lm203688/aishield/issues/665) · 2026-08-28 · open · outside contributor · 1 comment

### 📉 获客指标告警 (run 32371505871)

获客指标触发告警阈值，请查看 acquisition_report.json。
运行链接: https://github.com/lm203688/aishield/actions/runs/32371505871

[Read the thread](https://github.com/lm203688/aishield/issues/559) · 2026-08-20 · closed · outside contributor · 1 comment

### 🛡️ AIShield 扫描发现严重安全问题 (run 31873969267)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/311) · 2026-08-15 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31841531402)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/288) · 2026-08-14 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31778564310)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/266) · 2026-08-14 · closed · outside contributor · 0 comments

### 🟠 [P1] MCP registry 上架失败

<!--aishield-fp:mcp-registry-fail-->
**级别：** 🟠 P1
**首次触发：** `2026-08-05T05:38:11.997422+00:00`
**指纹：** `mcp-registry-fail`

---

MCP 官方 registry 上架失败，生态入口仍然缺位。

常见原因：
1. server.json 的 name 命名空间与仓库 owner 不符（须为 io.github.<owner>/<name>）
2. description 超过 100 字符
3. npm 包尚未发布，registry 拒绝指向不存在的包

运行链接: https://github.com/lm203688/aishield/actions/runs/30978687238

---
> 本 Issue 由 AIShield 通知总线自动创建。故障恢复后会自动关闭，无需人工处理。

[Read the thread](https://github.com/lm203688/aishield/issues/19) · 2026-08-05 · closed · outside contributor · 1 comment

### 🟠 [P1] MCP registry 上架失败

<!--aishield-fp:mcp-registry-fail-->
**级别：** 🟠 P1
**首次触发：** `2026-08-05T05:31:57.476065+00:00`
**指纹：** `mcp-registry-fail`

---

MCP 官方 registry 上架失败，生态入口仍然缺位。

常见原因：
1. server.json 的 name 命名空间与仓库 owner 不符（须为 io.github.<owner>/<name>）
2. description 超过 100 字符
3. npm 包尚未发布，registry 拒绝指向不存在的包

运行链接: https://github.com/lm203688/aishield/actions/runs/30978368893

---
> 本 Issue 由 AIShield 通知总线自动创建。故障恢复后会自动关闭，无需人工处理。

[Read the thread](https://github.com/lm203688/aishield/issues/18) · 2026-08-05 · closed · outside contributor · 2 comments

### 🟠 [P1] npm 发布失败

<!--aishield-fp:npm-publish-fail-->
**级别：** 🟠 P1
**首次触发：** `2026-08-04T15:09:45.674057+00:00`
**指纹：** `npm-publish-fail`

---

npm 发布流水线失败，包未能抵达用户侧。

preflight=success  build=success  publish=failure  verify=skipped

运行链接: https://github.com/lm203688/aishield/actions/runs/30922599959

---
> 本 Issue 由 AIShield 通知总线自动创建。故障恢复后会自动关闭，无需人工处理。

[Read the thread](https://github.com/lm203688/aishield/issues/2) · 2026-08-04 · closed · outside contributor · 6 comments

## Most recent

### 🛡️ AIShield 扫描发现严重安全问题 (run 32263530169)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/505) · 2026-08-19 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 32228039698)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/491) · 2026-08-19 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 32038461239)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/413) · 2026-08-17 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31903292014)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/333) · 2026-08-15 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31737793605)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/250) · 2026-08-13 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31656181403)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/226) · 2026-08-13 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31457970713)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/161) · 2026-08-11 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31438191218)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/153) · 2026-08-10 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31429279751)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/149) · 2026-08-10 · closed · outside contributor · 0 comments

### 🛡️ AIShield 扫描发现严重安全问题 (run 31316391522)

[Archived] 自动化告警，已关闭归档。v4.3.0 已重构自动化体系。

[Read the thread](https://github.com/lm203688/aishield/issues/100) · 2026-08-09 · closed · outside contributor · 0 comments

The remaining reports are on [the project's issue tracker](https://github.com/lm203688/aishield/issues).