v2.3.1 - Security Patch

Security Fix

This release patches a path traversal vulnerability in the credential vault.

Fixed

• Credential ID validation - Added validateCredentialId() method to prevent path traversal attacks in get(), delete(), and update() methods
  • Blocks path traversal characters (.., /, \)
  • Enforces expected credential ID format: cred_<timestamp>_<random>
  • Throws CredentialSecurityError on invalid input

Upgrade

npm update @pansec/chrome-mcp-secure

Full Changelog: v2.3.0...v2.3.1