Skip to content

blockrunai/blockrun-mcp

v0.24.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 28d MCP Search & Web
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai claude-code llm mcp mcp-server x402

Affected surfaces

rce_ssrf

Summary

AI summary

Fixed SSRF bypass and raised thinking.budget_tokens floor to 1024.

Full changelog

A fourth audit pass (regression-hunting the 0.24.1–0.24.2 fixes + packaging/build) found two issues, both in fixes shipped earlier in the 0.24.x line.

  • fix(security) — the image SSRF deny-list (added in 0.24.1) only decoded the decimal ::ffff:127.0.0.1 form, but the URL parser canonicalizes mapped literals to hex (::ffff:7f00:1), so http://[::ffff:169.254.169.254]/ reached cloud metadata and [::ffff:127.0.0.1] reached loopback. The hex ::ffff:hi:lo form is now decoded and blocked; the test exercises the hostname new URL() actually emits.
  • fix(chat) — thinking.budget_tokens floor raised to 1024 (Anthropic's minimum); the prior floor of 1 meant [1,1023] always 400'd.

72 unit tests. Full details in CHANGELOG.md.

Security Fixes

  • SSRF bypass fixed: decoded and blocked hex IPv6 mapped literals (`::ffff:hi:lo`) in image URLs that previously reached cloud metadata or loopback.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track blockrunai/blockrun-mcp

Get notified when new releases ship.

Sign up free

About blockrunai/blockrun-mcp

Live data for AI agents — search, research, markets, crypto, X/Twitter. Pay-per-call via x402 micropayments.

All releases →

Related context

Beta — feedback welcome: [email protected]