Skip to content

v1.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Oct 21:20
v1.7.0
e58160d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

npm distribution

Version 1.7.0 is published on npm.

npm install @seed-ship/duckdb-mcp-native@1.7.0

Security update

Users should upgrade to 1.7.0 for security hardening of SQL execution. Enable MCP_SECURITY_MODE=production or MCP_SANDBOX=strict to use the hardened engine policy; library consumers can configure sandbox: 'strict'. Strict mode disables external access, including S3. Development mode remains unrestricted by default. See the README for configuration and compatibility details.

Thank you to Zureno (GitHub: @Zureno; HackerOne: zureno21) for the report and coordinated disclosure.

See the changelog for the changes.

Assets 2
Loading