All pull requests

Pull requests

• fix(ci): restrict Claude workflow mentions

  #4817·FanouZeng-TT opened Sep 17, 2026·5 of 12 tasks·

  ·
  1

  1

• Harden fetch SSRF protection and git repo_path restriction

  #4803·sachajw opened Sep 13, 2026·3 tasks done·

  ·

• fix(fetch): harden URL fetching against SSRF

  #4773·Ethanz11-creat opened Sep 7, 2026Contributor·

  ·
  1

  1

• fix(filesystem): do not follow symlinks when reporting sizes in list_directory_with_sizes

  #4732·annatchijova opened Sep 1, 2026·

  ·

• fix: upgrade cryptography to 50.0.0 (CVE-2026-69247)

  #4730·anupamme opened Sep 1, 2026·

  ·

• fix(git): strictly validate repo path, working tree, and git directory

  #4723·AbhiPra24 opened Aug 31, 2026Contributor·

  ·
  1

• fix(everything): re-check GZIP_ALLOWED_DOMAINS on redirect hops

  #4622·SashaMIT opened Aug 8, 2026·7 of 12 tasks·

  ·
  3

• fix: upgrade brace-expansion to 5.0.7, 1.1.16, 2.1.2 (CVE-2026-13149)

  #4566·anupamme opened Jul 29, 2026·3 tasks done·

  ·

• fix(git): sandbox validate_repo_path to cwd when --repository is unset (partial-bypass of CVE-2025-68145)

  #4552·ahmadfardan464-cmyk opened Jul 26, 2026·

  ·

• feat(everything): serve both protocol eras on SDK v2 (2026-07-28 + legacy)

  #4551·olaservo opened Jul 26, 2026Member·11 of 12 tasks·

  ·
  8

• ci: auto-close new-server PRs and triage new-server issues

  #4528·olaservo opened Jul 14, 2026Member·1 task done·

  ·
  6

• [Security] Path validation bypass on Windows via NTFS Alternate Data Streams (ADS) in secure-filesystem-server

  #4523·andreiminca opened Jul 13, 2026·6 of 12 tasks·

  ·

• fix(everything): block SSRF to internal/metadata IPs in gzip-file-as-resource

  #4498·olaservo opened Jul 8, 2026Member·10 of 12 tasks·

  ·
  21

• fix(fetch): block SSRF to internal/metadata IPs by default

  #4497·olaservo opened Jul 8, 2026Member·11 of 12 tasks·

  ·
  19

• fix(fetch): block private network URL fetches

  #4226·krishhgg opened May 22, 2026Contributor·

  ·
  1

  2

• everything: harden default CORS to localhost Inspector only

  #4204·CrunchyJohnHaven opened May 19, 2026·4 tasks·

  ·

• feat(fetch): implement streaming byte cap to prevent resource exhaustion

  #4185·neuralmanacle opened May 17, 2026·6 tasks done·

  ·
  1

• fix(filesystem): fix quote style and add fileURLToPath regression test

  bugserver-filesystem
  #3353·olaservo opened Feb 19, 2026Member·1 task done·

  ·
  4

• everything: safer CORS + loopback bind for HTTP transports

  bugserver-everything
  #3303·TheodorNEngoy opened Feb 8, 2026·

  ·
  4

• feat(fetch): add SSRF protection and comprehensive security test suite

  enhancementserver-fetch
  #3180·Tomo1912 opened Jan 5, 2026·10 of 12 tasks·

  ·
  3

• Register MCP reference servers in the official MCP Registry

  enhancement
  #3175·olaservo opened Jan 4, 2026Member·9 of 12 tasks·

  ·
  1

  3

• feat(everything): add trigger-agentic-sampling tool

  enhancementserver-everything
  #3163·olaservo opened Dec 30, 2025Member·9 of 12 tasks·

  ·
  14

• Resolve #604 Running mcp-server-git with uvx gives full disk access/--repository param is ignored

  bugserver-git
  #630·sparesparrow opened Feb 15, 2025·11 of 12 tasks·

  ·
  1

  4