Skip to content

v1.1.5

Choose a tag to compare

@tumf tumf released this 02 Aug 03:16
· 11 commits to main since this release

Security

  • Require MCP Python SDK >=1.28.1 to address GHSA-vj7q-gjh5-988w, where the WebSocket server transport did not validate Host/Origin headers.
  • Includes the command argument hardening published in GHSA-gvwf-5g64-3vvw. Versions <=1.1.2 must upgrade to 1.1.3 or later.

PyPI: https://pypi.org/project/mcp-shell-server/1.1.5/