Skip to content

0.7.2

Choose a tag to compare

@calebl calebl released this 31 Oct 10:58
16dd9b2

Security

  • fast-uri is updated from 3.1.8 to 3.1.9 for GHSA-wjr9-j795-jxcr (host confusion via unchecked WHATWG host canonicalization). Neither server was exposed: the stdio server reaches fast-uri only through ajv in @modelcontextprotocol/sdk, which it uses only to validate elicitation responses, and it never sends elicitation requests; the Worker uses @modelcontextprotocol/server and does not depend on fast-uri.

See the CHANGELOG for details.