Repository navigation
0.7.2
Security
fast-uriis updated from 3.1.8 to 3.1.9 for GHSA-wjr9-j795-jxcr (host confusion via unchecked WHATWG host canonicalization). Neither server was exposed: the stdio server reachesfast-urionly throughajvin@modelcontextprotocol/sdk, which it uses only to validate elicitation responses, and it never sends elicitation requests; the Worker uses@modelcontextprotocol/serverand does not depend onfast-uri.
See the CHANGELOG for details.