Skip to content

v2.0.2

Choose a tag to compare

View all tags
@ochafik ochafik released this 25 Sep 14:06
v2.0.2
fe9a9f1

What's Changed

Patch release. No changes to the @modelcontextprotocol/ext-apps library itself; the fix is in the @modelcontextprotocol/server-pdf example package.

Security

  • @modelcontextprotocol/server-pdf now depends on the exact pdfjs-dist 5.4.530 instead of ^5.0.0. The range let a fresh install resolve pdfjs-dist 5.6.83 or later (currently 5.7.284), which is affected by GHSA-hq66-cqwq-w95j (arbitrary JavaScript execution when opening a crafted PDF). 5.4.530 is outside the affected range and is the version the repository already tests against. Node support is unchanged. by @ochafik in #789

Full Changelog: v2.0.1...v2.0.2

Contributors

ochafik
Assets 3
Loading