Nntfy-me-mcp 📤An ntfy MCP server for sending ntfy notifications to your self-hosted ntfy server 📤 (supports secure token auth - use with npx or docker!)

mcp-so:ntfy-me-mcp_Dieg0ski

View source

92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

Score

92/100

MEDIUM 1

Findings (1)

MEDIUM

Docker pull and run untrusted image EXTDL_015

external-download L36

Detects pulling and running Docker images from external registries

docker run -d dieg0ski/n

FIX

Pin Docker images to a specific digest (e.g., image@sha256:abc...) instead of using mutable tags like :latest. Use trusted base images from verified publishers.

FP?

Likely FP if the Docker command pulls a well-known official image (e.g., docker pull python:3.11) in setup documentation.