Skip to content

V1.20.1

Latest

Choose a tag to compare

@SepineTam SepineTam released this 19 Jun 04:04
· 2 commits to master since this release

Stata-MCP v1.20.1

Release Date: June 19, 2026
Type: Security Fix

What's New

Resolves security alerts by hardening the Stata command guard against comment and frame-prefix bypasses.

Changes

  • Guard: Stripped Stata block comments (/* */) before security validation to prevent dangerous commands from being hidden inside comments
  • Guard: Stripped frame prefixes before command checks so dangerous commands cannot bypass detection via frame scoping
  • Dependencies: Updated locked dependencies to resolve security alerts
  • Tests: Added validator tests for block comment stripping and frame prefix stripping