Skip to content

cameronrye/activitypub-mcp

v3.2.1 Security

This release includes 7 security fixes for security teams reviewing exposed deployments.

Published 1mo MCP Data & Storage
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 7 known CVEs

Topics

activitypub fedify fediverse mcp mcp-server webfinger

Affected surfaces

deps crypto_tls

Summary

AI summary

Security patch updating undici to 7.28.0 fixing multiple high‑severity issues.

Full changelog

[3.2.1] - 2026-06-22

Dependency maintenance and security patch release. No source or API changes —
tool names, schemas, and human-readable responses are identical to 3.2.0.

Security

  • undici 7.26.0 → 7.28.0 — clears a HIGH-severity advisory chain affecting
    undici <= 7.27.2, the HTTP client behind every Fediverse fetch: TLS
    certificate-validation bypass via dropped requestTls in the SOCKS5
    ProxyAgent (GHSA-vmh5-mc38-953g), shared-cache cross-user information
    disclosure (GHSA-pr7r-676h-xcf6), Set-Cookie percent-decoding header
    injection (GHSA-p88m-4jfj-68fv), WebSocket fragment-count denial of service
    (GHSA-vxpw-j846-p89q), SOCKS5 proxy-pool cross-origin routing
    (GHSA-hm92-r4w5-c3mj), keep-alive response-queue poisoning
    (GHSA-35p6-xmwp-9g52), and SameSite attribute downgrade (GHSA-g8m3-5g58-fq7m).
    Stayed on the 7.x line because undici 8 requires Node ≥ 22.19, while this
    package still supports Node ≥ 20.

Changed

  • Dependency maintenance — refreshed transitive and dev/build dependencies
    (content-disposition, hasown, astro, tldts-core, @clack/prompts,
    @emnapi/runtime, and the @csstools/* tooling) and pinned CI actions
    (actions/checkout 7, softprops/action-gh-release) to their latest patches.

Security Fixes

  • GHSA-vmh5-mc38-953g — TLS certificate‑validation bypass in undici SOCKS5 ProxyAgent
  • GHSA-pr7r-676h-xcf6 — Shared‑cache cross‑user information disclosure
  • GHSA-p88m-4jfj-68fv — `Set-Cookie` percent‑decoding header injection
  • GHSA-vxpw-j846-p89q — WebSocket fragment‑count denial of service
  • GHSA-hm92-r4w5-c3mj — SOCKS5 proxy‑pool cross‑origin routing
  • GHSA-35p6-xmwp-9g52 — Keep‑alive response‑queue poisoning
  • GHSA-g8m3-5g58-fq7m — `SameSite` attribute downgrade
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track cameronrye/activitypub-mcp

Get notified when new releases ship.

Sign up free

About cameronrye/activitypub-mcp

A comprehensive MCP server that enables LLMs to explore and interact with the Fediverse through ActivityPub protocol. Features WebFinger discovery, timeline fetching, instance exploration, and cross-platform support for Mastodon, Pleroma, Misskey, and other ActivityPub servers.

All releases →

Related context

Earlier breaking changes

  • v2.1.0 `activitypub://instance-info/{domain}` `software` field now an object instead of a string.
  • v2.1.0 Removed `activitypub://post-thread/{postUrl}` URI form; use `{domain}/{statusId}` instead.
  • v2.0.0 'get-relationship' no longer accepts legacy `accountIds` array; requires single `acct` string.
  • v2.0.0 `MCP_HTTP_CORS_ORIGINS` no longer defaults to '*'; must be set explicitly.
  • v2.0.0 `scheduledId` renamed to `scheduledPostId` in scheduling tools.

Beta — feedback welcome: [email protected]