Skip to content

fix: upgrade @modelcontextprotocol/sdk to 1.24.3 (CVE-2025-66414) #107

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
huozhi merged 1 commit into from
Dec 12, 2025
Merged

fix: upgrade @modelcontextprotocol/sdk to 1.24.3 (CVE-2025-66414) #107

huozhi merged 1 commit into from
Dec 12, 2025

Conversation

@gaojude
Copy link
Contributor

@gaojude gaojude commented Dec 11, 2025

Fixes: #103

@socket-security
Copy link

socket-security bot commented Dec 11, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​modelcontextprotocol/​sdk@​1.21.0 ⏵ 1.24.399100 +1610099100

View full report

@gaojude gaojude requested a review from huozhi December 12, 2025 04:40
@huozhi huozhi merged commit e869d6e into main Dec 12, 2025
3 checks passed
@huozhi huozhi deleted the jude/bump-mcp-sdk branch December 12, 2025 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@huozhi huozhi huozhi approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

CVE-2025-66414

3 participants

@gaojude @huozhi