ooples token-optimizer-mcp

• CVE-2026-55156 Medium 5.3 Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints 0.4%
• CVE-2026-55157 High 8.4 Token Optimizer MCP: OS command injection in smart_user via username in get-user-info 0.9%