Skip to content

v1.10.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 14:58
· 32 commits to main since this release
v1.10.7
8129b71

Release v1.10.7

Release type: stable
Release line: 1.10.x
Branch: release/1.10.x

Installation

npm install @frontmcp/sdk@1.10.7

What's New

Bug Fixes

  • Upgraded mcp-from-openapi to version 2.9.1, addressing a security advisory that prevented headers from being forwarded when a redirect leaves the origin of a spec URL. This update also ensures host lists are case-insensitive and handle trailing dots correctly, preventing bypasses in blockedHosts. (#908)

Improvements

  • Updated the SECURITY.md to reflect the current policy that only the latest minor release receives security updates. It also clarifies that all @frontmcp/* packages and the frontmcp CLI are released together at the same version. Additionally, private vulnerability reporting is now enabled through GitHub's Security Advisories. (#908)

What's Changed

  • fix(security): upgrade mcp-from-openapi to 2.9.1, and report privately on GitHub by @frontegg-david in #908

Full Changelog: v1.10.6...v1.10.7

Contributors

frontegg-david
Assets 2
Loading