Skip to content

Web Researcher MCP

v1.45.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai ai-agent anti-hallucination bibliography citation-verification claude
+13 more
claude-code claude-desktop content-extraction cursor fact-checking go llm mcp mcp-server model-context-protocol research web-scraping web-search

Affected surfaces

deps

Summary

AI summary

Broad release touches @zoharbabin, Other, Bug Fixes, and harness.

Full changelog

What's Changed

Full changelog: https://github.com/zoharbabin/web-researcher-mcp/compare/v1.44.0...v1.45.1

Changelog

New Features

  • 0ed409a2f4361937e0800c7d9e8cb89278ff57d5: feat(scraper): add Jina Reader extraction tier (#270) (@zoharbabin)
  • 8ed4f15a93b9e6277cf8cebb22b59f57f497d3db: feat(scraper): fetch Reddit shreddit top comments for forumSignals (#283) (@zoharbabin)
  • 6e7c30fd27f451f5f31a8e7f9bf0790ca831e737: feat(scraper): switch YouTube transcripts to WebVTT + add highlight scoring (#284) (@zoharbabin)
  • 1c6ac7760894a26105da83eb1370020afdc599d6: feat(search): add CORE.ac.uk academic provider (#267) (@zoharbabin)
  • b599036f6e7c5c04b1f59c0646474d1c902e32ad: feat(search): add PMC efetch full-text to PubMed provider (#268) (@zoharbabin)
  • c537ebf63bdc24b7665ab79e305b43b1b1427005: feat(search): add monarch_search over the Monarch Initiative biomedical knowledge graph (#318) (@zoharbabin)
  • bb83636689a270c2bb36f9ab8742e748d747cbd9: feat(tools): add company_recon OSINT tool (#323) (@zoharbabin)
  • 1ba73ce413801a854fb227d945bf2b069e2740ac: feat(tools): add paper_fulltext tool (#269) (@zoharbabin)

Bug Fixes

  • 8d42eac4a72f62588f345daf26e7cf9d667b8e5a: fix(ci): filter nixpkgs PR lookup by owner in jq, not gh pr list --head (#409) (@zoharbabin)
  • 0fd49fad27dc280dbc46bce81c13a82657a127a0: fix(company_recon): clamp ct_logs phase to 25 results, not 1000 (@zoharbabin)
  • 3c388c80e0a39e27dc6cc44eec717f340a815117: fix(company_recon): give Wayback CDX resolver a 90s HTTP timeout (@zoharbabin)
  • 6c07bd67cd2df13580a9cf41cd8250ed8d92a876: fix(deps): bump gosec to pull patched grpc, resolving GHSA-hrxh-6v49-42gf (#411) (@zoharbabin)
  • 342e16543f06835eb15e8bbf4f54fdb50d6fccc8: fix(harness): drop internal/tools from gate 3's isolation test run (@zoharbabin)
  • 02910053e79d045dbebe67ff9fed33a62b7f72aa: fix(scraper): add JINA_READER_DISABLED kill switch for the Jina Reader tier (@zoharbabin)
  • 64f2fcf189284b87b571583dac176f31736edbc0: fix(scraper): raw mode reuses the tiered fetch pipeline instead of a weak single-shot fetch (#431) (@zoharbabin)
  • 3df2690c2f4272faa7dfcb2ad13e6f2d04fb11f4: fix(scraper): strip WebVTT cue-role tags from auto-generated captions (@zoharbabin)
  • 7d0d1be5cd6580d2cf32f585f2acc8ab5c401002: fix(scraper): wire PipelineConfig.ShredditBase to the shreddit comment fetch (@zoharbabin)
  • 6abe41e8b571d917a27d46eeb15774ad677dcc27: fix(search): add depth-tiered NumResults defaults and per-provider max-fetch caps (#286) (@zoharbabin)
  • 28b679cb99f386ddd86f9312b8b583b7f0024983: fix(search): capture PMC JATS body paragraphs outside and nested subsections (@zoharbabin)
  • 941de29ff85bc3bc99c69f0a7a674804b868de9f: fix(search): recover awesome_list_search via GitHub fallback on ecosyste.ms outage (#430) (@zoharbabin)
  • f9932034e89f718f3a4ad32695fa4d5ea2f2c895: fix(tools): honor explicit provider in monarch_search (@zoharbabin)
  • 2d1e77026e5893320802359dd8d84cabbf98a2f8: fix(tools): surface upstream FetchPaper errors instead of misclassifying as config_error (@zoharbabin)
  • da8003751a3e563172af733d2828e4a4822eb98c: fix: company_recon web-phase gap, browser 404 blindness, audit_bibliography arXiv false-positive (#433) (@zoharbabin)

Other

  • b9dfc83b4d5a7b0af00cb131293d0362865da687: Merge pull request #415 from zoharbabin/feat/267-core-academic-provider (@zoharbabin)
  • f4a29672dff6e715fba2af343b8d6382e86733f1: Merge pull request #416 from zoharbabin/feat/268-pubmed-pmc-fulltext (@zoharbabin)
  • 2cd8a936081d0c76c51105ca534684301e476df0: Merge pull request #417 from zoharbabin/feat/270-jina-reader-tier (@zoharbabin)
  • d8e900fc0f62f3a8b902849e900e26b07488a468: Merge pull request #418 from zoharbabin/feat/269-paper-fulltext-tool (@zoharbabin)
  • 95abbf4f821fa93cdf89f75be99bbc2d6c42fdbf: Merge pull request #419 from zoharbabin/feat/318-monarch-biomed-lens (@zoharbabin)
  • 36f4e4b85713fc25f291b337691833ab5e692f27: Merge pull request #420 from zoharbabin/feat/286-router-depth-tiers (@zoharbabin)
  • 8203f42b0ef2b32747d02fb8ad5c1898fbf5c8c3: Merge pull request #421 from zoharbabin/feat/283-reddit-shreddit-comments (@zoharbabin)
  • 37ce366bc6b12b83000a01222670bd38318ee138: Merge pull request #422 from zoharbabin/feat/284-youtube-vtt-highlights (@zoharbabin)
  • 0cc449d5e146dc76d509671c6a24c77644137ebf: Merge pull request #423 from zoharbabin/feat/352-curriculum-lens-syllabus-gag-order (@zoharbabin)
  • 08fd7eec0d8fbeee90ad33fc27251f342912f6b0: Merge pull request #424 from zoharbabin/feat/323-company-recon-tool (@zoharbabin)
  • 93530865995e9f354c5f04cf57a4c24dc7b971a1: Merge pull request #425 from zoharbabin/fix/413-harness-isolation-gate (@zoharbabin)
  • a50413b8650cf9330549bde0cf8bd453acdaefbe: Merge pull request #426 from zoharbabin/fix/wayback-cdx-timeout (@zoharbabin)
  • 1a2916f014159e660685281a376b9d0d2f25e009: Merge pull request #428 from zoharbabin/chore/bump-version-1.45.0 (@zoharbabin)
  • 09dd64710722ce54cb74d8d3fcb7c69c208910ed: Merge remote-tracking branch 'origin/main' into feat/268-pubmed-pmc-fulltext (@zoharbabin)
  • 1d1b7d094fdd58ab3d1d235e8b1bb6fa3dcb300d: Merge remote-tracking branch 'origin/main' into feat/269-paper-fulltext-tool (@zoharbabin)
  • 2b6f5a55950925ff64137ddaeb689a508113823f: Merge remote-tracking branch 'origin/main' into feat/269-paper-fulltext-tool (@zoharbabin)
  • f4b01adf7f6cc6bfd82d88b27eeaffbd82c8be83: Merge remote-tracking branch 'origin/main' into feat/283-reddit-shreddit-comments (@zoharbabin)
  • 9ef80f2e19e79441d389c65aa5fb76358b7f8049: Merge remote-tracking branch 'origin/main' into feat/284-youtube-vtt-highlights (@zoharbabin)
  • f3d93ceea4b84c1d6978464e811ef3d34be3ea3d: Merge remote-tracking branch 'origin/main' into feat/286-router-depth-tiers (@zoharbabin)
  • 020709a98e198c0d89f5827d868cbd7e2a1289a7: Merge remote-tracking branch 'origin/main' into feat/323-company-recon-tool (@zoharbabin)
  • 0f7784e3600d059f07b77e1a67d83d1ae5953f93: Merge remote-tracking branch 'origin/main' into feat/352-curriculum-lens-syllabus-gag-order (@zoharbabin)
  • a7ac37794ef424051a784a57c0e32f96e1776785: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • 0a84e10acbe6bd81bc597220d1e9511467e7428b: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • 4a8d8bf59f2c0decc0057c84efe53c3f5e2bff1b: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • de3a6c92757756b812d9a69184db782ef86693f5: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • c33db75f3012392482ed361f8099448c7d64c455: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • 87695a305b54132f681f4d2e037b9acda6fbc598: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • 09877852670a1ab2d1172305d5906e0b7812a1cb: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • b1863c2898ee5466cf96e97c8ce1aca5ce3b544e: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • 3548df0d6b8f7123eab0558f8cdd9e770ab02da6: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
  • e459ade33f74645452b53bb08923929a2caf42f0: feat(search,tools): add curriculum lens + syllabus_search + gag_order_search (#352) (@zoharbabin)
  • d22b7bb03cbc8fa41fdf70ab56487d4ac29394a4: fix(scraper,search): resolve YouTube caption PO Token block and improve PubMed full-text hit rate (#429) (@zoharbabin)
  • 798bc1fc6efe8f12c03203d75eb1a79c61f32eed: fix(search,tools): citation_graph DOI-seed fallback, filing_search form_type inference, econ_search popularity, verify_recommendation lens selection (#435) (@zoharbabin)

Docker Images

# GitHub Container Registry
docker pull ghcr.io/zoharbabin/web-researcher-mcp:1.45.1

# Docker Hub
docker pull docker.io/zoharbabin/web-researcher-mcp:1.45.1

Homebrew

brew install zoharbabin/tap/web-researcher-mcp

Verify Checksums

sha256sum -c checksums.txt

Security Fixes

  • dep: GHSA-hrxh-6v49-42gf – bump gosec to pull patched grpc dependency fixing vulnerability

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Web Researcher MCP

Get notified when new releases ship.

Sign up free

About Web Researcher MCP

All releases →

Beta — feedback welcome: [email protected]