This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
ReleasePort's take
Moderate signalv0.11.1 patches AJV schema validation to stop ReDoS and compileβtime DoS attacks from untrusted schemas.
Why it matters: Addresses highβseverity (90) security risk affecting AJV schema validation; patching prevents denialβofβservice exploits in MCP server environments.
Summary
AI summaryUpdates π Bug Fixes, π Features, and 0.11.1 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Prevents ReDoS and compile-time DoS from untrusted AJV schemas Prevents ReDoS and compile-time DoS from untrusted AJV schemas Source: llm_adapter@2026-06-15 Confidence: high |
β |
| Feature | Medium |
Returns personalized Console links for token sessions in UI Returns personalized Console links for token sessions in UI Source: llm_adapter@2026-06-15 Confidence: high |
β |
| Bugfix | Medium |
Returns binary keyβvalue store records as MCP content blocks Returns binary keyβvalue store records as MCP content blocks Source: llm_adapter@2026-06-15 Confidence: high |
β |
| Bugfix | Low |
Contains webServerMcpPath origin errors to a single actor during tool load Contains webServerMcpPath origin errors to a single actor during tool load Source: llm_adapter@2026-06-15 Confidence: high |
β |
Full changelog
0.11.1 (2026-06-15)
π Features
π Bug Fixes
- Return binary key-value store records as MCP content blocks (#964) (59dec22) by @RobertCrupa
- Add format to verification steps in AGENTS.md (#990) (c8755ae) by @RobertCrupa
- ajv: Prevent ReDoS and compile-time DoS from untrusted schemas (#991) (ab55c5a) by @MQ37
- mcp: Contain webServerMcpPath origin errors to one actor during tool load (#984) (e7dfdea) by @MQ37
Security Fixes
- **ajv:** Prevent ReDoS and compile-time DoS from untrusted schemas
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About apify/actors-mcp-server
Use 3,000+ pre-built cloud tools, known as Actors, to extract data from websites, e-commerce, social media, search engines, maps, and more
Related context
Related tools
Earlier breaking changes
- v0.11.0 Removes legacy SSE server transport.
Beta — feedback welcome: [email protected]