Read, organise and carefully-gated send for Proton Mail, without your mail leaving this machine.
MCPpedia last refreshed this data
com.considus/proton-bridge-mcp is an MCP server that read, organise and carefully-gated send for Proton Mail, without your mail leaving this machine. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 58/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"com-considus-proton-bridge-mcp": {
"args": [
"pypdf"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Read, organise and carefully-gated send for Proton Mail, without your mail leaving this machine.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'pypdf' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
pypdf: Possible long runtimes with large amount of embedded files
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing the embedded files through the dictionary-based API. ### Patches This has been fixed in [pypdf==6.19.0](https://github.com/py-pdf/pypdf/releases/tag/6.19.0). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4081](https://github.com/py-pdf/pypdf/pull/4081).
pypdf: Possible long runtimes when generating appearance streams
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires updating form field values with flattening enabled, which triggers appearance stream generation. ### Patches This has been fixed in [pypdf==6.19.0](https://github.com/py-pdf/pypdf/releases/tag/6.19.0). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4087](https://github.com/py-pdf/pypdf/pull/4087).
pypdf: Possible large memory usage when retrieving alphabetical page labels
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires accessing the page labels of a document with large alphabetical labels. ### Patches This has been fixed in [pypdf==6.19.0](https://github.com/py-pdf/pypdf/releases/tag/6.19.0). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4096](https://github.com/py-pdf/pypdf/pull/4096).
pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a partially malformed `/FlateDecode` stream, where the byte-by-byte decompression is used. ### Patches This has been fixed in [pypdf==6.18.1](https://github.com/py-pdf/pypdf/releases/tag/6.18.1). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4073](https://github.com/py-pdf/pypdf/pull/4073).
pypdf: Possible large memory usage when parsing font data
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the `/Widths` entry of a TrueType or Type1 fonts with unusually large values, for example during text extraction. ### Patches This has been fixed in [pypdf==6.18.1](https://github.com/py-pdf/pypdf/releases/tag/6.18.1). ### Workarounds If you cannot upgrade yet, consider applying the changes from PR [#4072](https://github.com/py-pdf/pypdf/pull/4072).
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in communication
Official TypeScript library for the Telnyx API
Send email and newsletters with Mailtea over MCP, plus skills for email and website design.
Interact with Microsoft 365 and Office services through the Microsoft Graph API.
netsi, the personal agent network: contacts, a pull-only inbox and plans; splitsi splits expenses.
MCP Security Weekly
Get CVE alerts and security updates for com.considus/proton-bridge-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.