Security Fixes

High Severity Vulnerabilities Fixed

• CVE-2026-0621: Fixed ReDoS vulnerability in @modelcontextprotocol/sdk by updating to v1.25.2
• CVE-2025-15284: Fixed DoS vulnerability in qs package via arrayLimit bypass by adding pnpm override for v6.14.1

Features

GitHub Stars API Proxy

• Added /api/github/stars endpoint to proxy GitHub API calls
• Implemented 5-minute cache to reduce rate limiting issues
• Support for GITHUB_TOKEN/GITHUB_PAT for authenticated requests
• Updated useGithubStars hook to use internal API

Changes

• Updated @modelcontextprotocol/sdk from 1.24.3 to 1.25.2
• Added pnpm override for qs@<6.14.1 to ensure patched version
• Fixed type check in opensource.tsx for stars display