n24q02m/better-godot-mcp

v1.6.0 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 2mo MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs

Topics

ai-agents ai-coding claude claude-code cursor docker

+7 more

gdscript godot godot-engine mcp mcp-server model-context-protocol typescript

Affected surfaces

rce_ssrf

Summary

AI summary

Patch path traversal in six tools and fix physics tool path traversal vulnerability.

Full changelog

v1.6.0 (2026-03-17)

Bug Fixes

Add Renovate mise manager disable rule (6d7e1b8)
Correct Glama.ai badge URL format (c608879)
Patch path traversal in 6 tools and add recursion depth limit (3fb391d)
Security fix] Fix path traversal in physics tool (#265, 9e7505e)
Standardize async I/O and error handling across all 18 tools (#279, 5361f4f)
Standardize repo files across MCP server portfolio (c73bdef)
Update biome schema version to match installed 2.4.7 (37dc04f)
ci: Use pull_request_target for jobs requiring secrets (5b91c85)

Chores

deps: Lock file maintenance (#273, 7f0ce32)
deps: Update dawidd6/action-send-mail action to v15 (#252, b3c03e1)
deps: Update non-major dependencies (#251, 2f9ccf3)
deps: Update oven-sh/setup-bun digest to 0c5077e (#250, f0113f2)
deps: Update step-security/harden-runner digest to fa2e9d6 (#276, 9a8f4e9)

Features

Add better-telegram-mcp to Also by section (51de248)
Add glama.json for Glama directory listing (10479cb)

Detailed Changes: v1.5.1...v1.6.0

Security Fixes

Patch path traversal vulnerability affecting six tools and introduce recursion depth limit
Fix path traversal in physics tool (security fix)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track n24q02m/better-godot-mcp

Get notified when new releases ship.

About n24q02m/better-godot-mcp

18 composite tools for structured Godot 4.x interaction: scenes, nodes, GDScript, shaders, animation, tilemap, physics, audio, navigation, UI, input mapping, and signals.

All releases →