Threats affecting pkg:github/openpanel-dev/openpanel

OpenPanel versions up to 2.3.0 log Model Context Protocol authentication tokens from URL query parameters in plaintext without redaction. This allows attackers with access to application logs or stdout to capture base64-encoded credentials and potentially replay MCP requests to access project analytics.