This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 4mo
MCP Developer Tools
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
api-reference
claude
documentation
mcp
model-context-protocol
offline-docs
+6 more
twitter
twitter-api
twitterapi
twitterapi-io
twitterapiio
x-api
Summary
AI summaryFixed ReDoS vulnerability in @modelcontextprotocol/sdk and arrayLimit bypass DoS in qs.
Full changelog
Security
- Upgraded
@modelcontextprotocol/sdkfrom 1.24.3 to 1.25.3 (fixes ReDoS vulnerability GHSA-8r9q-7v3j-jr4g) - Upgraded
qsfrom 6.14.0 to 6.14.1 (fixes arrayLimit bypass DoS GHSA-6rw7-vpxm-498p)
Full Changelog: https://github.com/dorukardahan/twitterapi-io-mcp/compare/v1.0.13...v1.0.14
Security Fixes
- dep: @modelcontextprotocol/sdk upgraded from 1.24.3 to 1.25.3 — fixes ReDoS vulnerability GHSA-8r9q-7v3j-jr4g
- dep: qs upgraded from 6.14.0 to 6.14.1 — fixes arrayLimit bypass DoS vulnerability GHSA-6rw7-vpxm-498p
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About dorukardahan/twitterapi-docs-mcp
Offline access to TwitterAPI.io documentation for AI assistants. 52 API endpoints, guides, pricing info, and authentication docs.
Related context
Beta — feedback welcome: [email protected]