This release adds 3 notable features for engineering teams evaluating rollout.
Published 1mo
MCP SaaS Integrations
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
aws
mcp
mcp-client
mcp-clients
mcp-host
mcp-server
+3 more
mcp-servers
mcp-tools
modelcontextprotocol
Affected surfaces
auth
rce_ssrf
Summary
AI summaryBroad release touches 2026.06.20260617223749, aws-api-mcp-server, cloudwatch-applicationsignals, and eks-mcp-server.
Full changelog
2026.06.20260617223749
What's Changed
- fix(aws-transform-mcp-server): Confine write path and block sensitive filenames on writes by @srinawa-150 in https://github.com/awslabs/mcp/pull/3696
- docs(aurora-dsql): reflect native JSON/JSONB column support by @amaksimo in https://github.com/awslabs/mcp/pull/3789
- chore(cloudwatch): add Rashmi Dwaraka as codeowner by @shri-tambe in https://github.com/awslabs/mcp/pull/3796
- chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.26 by @awslabs-mcp in https://github.com/awslabs/mcp/pull/3797
- fix(eks-mcp-server): support kubernetes>=36.0.0 bearer token auth by @masamaru0513 in https://github.com/awslabs/mcp/pull/3613
- chore(sagemaker-unified-studio-mcp): remove preview from the smus-mcp documentation by @naikvaib in https://github.com/awslabs/mcp/pull/3808
- fix(eks-mcp-server): add path validation to prevent file read/write in sensitive directories by @srhsrhsrhsrh in https://github.com/awslabs/mcp/pull/3799
- chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.28 by @awslabs-mcp in https://github.com/awslabs/mcp/pull/3812
- feat(cloudwatch-applicationsignals): add dynamic instrumentation tools by @pxaws in https://github.com/awslabs/mcp/pull/3801
- chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.29 by @awslabs-mcp in https://github.com/awslabs/mcp/pull/3819
- fix(cloudwatch-applicationsignals): address DI post-merge review feedback by @pxaws in https://github.com/awslabs/mcp/pull/3817
- chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.30 by @awslabs-mcp in https://github.com/awslabs/mcp/pull/3944
- feat(cloudwatch-applicationsignals): add ServiceEvents telemetry tools by @mxiamxia in https://github.com/awslabs/mcp/pull/3813
- docs(cloudwatch-applicationsignals): sync README tool list with registered ServiceEvents/X-Ray tools by @mxiamxia in https://github.com/awslabs/mcp/pull/3966
- fix(cloudwatch-applicationsignals): get_endpoint_performance returns 0 endpoints for all Application Signals services by @mxiamxia in https://github.com/awslabs/mcp/pull/3967
- fix(redshift-mcp-server): empty result set by @grayhemp in https://github.com/awslabs/mcp/pull/3822
- chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.31 by @awslabs-mcp in https://github.com/awslabs/mcp/pull/3971
- feat(security-agent-mcp-server): add diff scan, threat model review, and path validation by @ljainiaz in https://github.com/awslabs/mcp/pull/3973
- chore(deps): update npm: bump launch-editor from 2.11.1 to 2.14.1 in /docusaurus by @dependabot[bot] in https://github.com/awslabs/mcp/pull/3976
- fix: use semver pattern in version test instead of hardcoded value by @ljainiaz in https://github.com/awslabs/mcp/pull/3979
- chore: release/2026.06.20260617223749 by @awslabs-mcp in https://github.com/awslabs/mcp/pull/3980
New Contributors
- @srinawa-150 made their first contribution in https://github.com/awslabs/mcp/pull/3696
- @masamaru0513 made their first contribution in https://github.com/awslabs/mcp/pull/3613
- @pxaws made their first contribution in https://github.com/awslabs/mcp/pull/3801
Full Changelog: https://github.com/awslabs/mcp/compare/2026.06.20260609132838...2026.06.20260617223749
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]