v1.1.5
Security
- Require MCP Python SDK
>=1.28.1to address GHSA-vj7q-gjh5-988w, where the WebSocket server transport did not validate Host/Origin headers. - Includes the command argument hardening published in GHSA-gvwf-5g64-3vvw. Versions
<=1.1.2must upgrade to1.1.3or later.