Skip to content

v0.2.5

Latest

Choose a tag to compare

@github-actions github-actions released this 08 Oct 15:59
4ee4ff0

Security

  • @modelcontextprotocol/sdk moves to 1.32.1 and @modelcontextprotocol/client, core and server to 2.3.1, closing GHSA-6qxp-vccf-f47h (the OAuth client could send credentials to an authorization server chosen by the MCP server). Upstream OAuth goes through the client package, so the gateway was exposed when connecting to an untrusted upstream.

docker pull ghcr.io/k2so-dev/junctio:0.2.5