This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1d
MCP Developer Tools
✓ No known CVEs patched
This release patches 1 known CVE
Topics
ai
ai-agent
anti-hallucination
bibliography
citation-verification
claude
+13 more
claude-code
claude-desktop
content-extraction
cursor
fact-checking
go
llm
mcp
mcp-server
model-context-protocol
research
web-scraping
web-search
Affected surfaces
deps
Summary
AI summaryBroad release touches @zoharbabin, Other, Bug Fixes, and harness.
Full changelog
What's Changed
Full changelog: https://github.com/zoharbabin/web-researcher-mcp/compare/v1.44.0...v1.45.1
Changelog
New Features
- 0ed409a2f4361937e0800c7d9e8cb89278ff57d5: feat(scraper): add Jina Reader extraction tier (#270) (@zoharbabin)
- 8ed4f15a93b9e6277cf8cebb22b59f57f497d3db: feat(scraper): fetch Reddit shreddit top comments for forumSignals (#283) (@zoharbabin)
- 6e7c30fd27f451f5f31a8e7f9bf0790ca831e737: feat(scraper): switch YouTube transcripts to WebVTT + add highlight scoring (#284) (@zoharbabin)
- 1c6ac7760894a26105da83eb1370020afdc599d6: feat(search): add CORE.ac.uk academic provider (#267) (@zoharbabin)
- b599036f6e7c5c04b1f59c0646474d1c902e32ad: feat(search): add PMC efetch full-text to PubMed provider (#268) (@zoharbabin)
- c537ebf63bdc24b7665ab79e305b43b1b1427005: feat(search): add monarch_search over the Monarch Initiative biomedical knowledge graph (#318) (@zoharbabin)
- bb83636689a270c2bb36f9ab8742e748d747cbd9: feat(tools): add company_recon OSINT tool (#323) (@zoharbabin)
- 1ba73ce413801a854fb227d945bf2b069e2740ac: feat(tools): add paper_fulltext tool (#269) (@zoharbabin)
Bug Fixes
- 8d42eac4a72f62588f345daf26e7cf9d667b8e5a: fix(ci): filter nixpkgs PR lookup by owner in jq, not gh pr list --head (#409) (@zoharbabin)
- 0fd49fad27dc280dbc46bce81c13a82657a127a0: fix(company_recon): clamp ct_logs phase to 25 results, not 1000 (@zoharbabin)
- 3c388c80e0a39e27dc6cc44eec717f340a815117: fix(company_recon): give Wayback CDX resolver a 90s HTTP timeout (@zoharbabin)
- 6c07bd67cd2df13580a9cf41cd8250ed8d92a876: fix(deps): bump gosec to pull patched grpc, resolving GHSA-hrxh-6v49-42gf (#411) (@zoharbabin)
- 342e16543f06835eb15e8bbf4f54fdb50d6fccc8: fix(harness): drop internal/tools from gate 3's isolation test run (@zoharbabin)
- 02910053e79d045dbebe67ff9fed33a62b7f72aa: fix(scraper): add JINA_READER_DISABLED kill switch for the Jina Reader tier (@zoharbabin)
- 64f2fcf189284b87b571583dac176f31736edbc0: fix(scraper): raw mode reuses the tiered fetch pipeline instead of a weak single-shot fetch (#431) (@zoharbabin)
- 3df2690c2f4272faa7dfcb2ad13e6f2d04fb11f4: fix(scraper): strip WebVTT cue-role tags from auto-generated captions (@zoharbabin)
- 7d0d1be5cd6580d2cf32f585f2acc8ab5c401002: fix(scraper): wire PipelineConfig.ShredditBase to the shreddit comment fetch (@zoharbabin)
- 6abe41e8b571d917a27d46eeb15774ad677dcc27: fix(search): add depth-tiered NumResults defaults and per-provider max-fetch caps (#286) (@zoharbabin)
- 28b679cb99f386ddd86f9312b8b583b7f0024983: fix(search): capture PMC JATS body paragraphs outside and nested subsections (@zoharbabin)
- 941de29ff85bc3bc99c69f0a7a674804b868de9f: fix(search): recover awesome_list_search via GitHub fallback on ecosyste.ms outage (#430) (@zoharbabin)
- f9932034e89f718f3a4ad32695fa4d5ea2f2c895: fix(tools): honor explicit provider in monarch_search (@zoharbabin)
- 2d1e77026e5893320802359dd8d84cabbf98a2f8: fix(tools): surface upstream FetchPaper errors instead of misclassifying as config_error (@zoharbabin)
- da8003751a3e563172af733d2828e4a4822eb98c: fix: company_recon web-phase gap, browser 404 blindness, audit_bibliography arXiv false-positive (#433) (@zoharbabin)
Other
- b9dfc83b4d5a7b0af00cb131293d0362865da687: Merge pull request #415 from zoharbabin/feat/267-core-academic-provider (@zoharbabin)
- f4a29672dff6e715fba2af343b8d6382e86733f1: Merge pull request #416 from zoharbabin/feat/268-pubmed-pmc-fulltext (@zoharbabin)
- 2cd8a936081d0c76c51105ca534684301e476df0: Merge pull request #417 from zoharbabin/feat/270-jina-reader-tier (@zoharbabin)
- d8e900fc0f62f3a8b902849e900e26b07488a468: Merge pull request #418 from zoharbabin/feat/269-paper-fulltext-tool (@zoharbabin)
- 95abbf4f821fa93cdf89f75be99bbc2d6c42fdbf: Merge pull request #419 from zoharbabin/feat/318-monarch-biomed-lens (@zoharbabin)
- 36f4e4b85713fc25f291b337691833ab5e692f27: Merge pull request #420 from zoharbabin/feat/286-router-depth-tiers (@zoharbabin)
- 8203f42b0ef2b32747d02fb8ad5c1898fbf5c8c3: Merge pull request #421 from zoharbabin/feat/283-reddit-shreddit-comments (@zoharbabin)
- 37ce366bc6b12b83000a01222670bd38318ee138: Merge pull request #422 from zoharbabin/feat/284-youtube-vtt-highlights (@zoharbabin)
- 0cc449d5e146dc76d509671c6a24c77644137ebf: Merge pull request #423 from zoharbabin/feat/352-curriculum-lens-syllabus-gag-order (@zoharbabin)
- 08fd7eec0d8fbeee90ad33fc27251f342912f6b0: Merge pull request #424 from zoharbabin/feat/323-company-recon-tool (@zoharbabin)
- 93530865995e9f354c5f04cf57a4c24dc7b971a1: Merge pull request #425 from zoharbabin/fix/413-harness-isolation-gate (@zoharbabin)
- a50413b8650cf9330549bde0cf8bd453acdaefbe: Merge pull request #426 from zoharbabin/fix/wayback-cdx-timeout (@zoharbabin)
- 1a2916f014159e660685281a376b9d0d2f25e009: Merge pull request #428 from zoharbabin/chore/bump-version-1.45.0 (@zoharbabin)
- 09dd64710722ce54cb74d8d3fcb7c69c208910ed: Merge remote-tracking branch 'origin/main' into feat/268-pubmed-pmc-fulltext (@zoharbabin)
- 1d1b7d094fdd58ab3d1d235e8b1bb6fa3dcb300d: Merge remote-tracking branch 'origin/main' into feat/269-paper-fulltext-tool (@zoharbabin)
- 2b6f5a55950925ff64137ddaeb689a508113823f: Merge remote-tracking branch 'origin/main' into feat/269-paper-fulltext-tool (@zoharbabin)
- f4b01adf7f6cc6bfd82d88b27eeaffbd82c8be83: Merge remote-tracking branch 'origin/main' into feat/283-reddit-shreddit-comments (@zoharbabin)
- 9ef80f2e19e79441d389c65aa5fb76358b7f8049: Merge remote-tracking branch 'origin/main' into feat/284-youtube-vtt-highlights (@zoharbabin)
- f3d93ceea4b84c1d6978464e811ef3d34be3ea3d: Merge remote-tracking branch 'origin/main' into feat/286-router-depth-tiers (@zoharbabin)
- 020709a98e198c0d89f5827d868cbd7e2a1289a7: Merge remote-tracking branch 'origin/main' into feat/323-company-recon-tool (@zoharbabin)
- 0f7784e3600d059f07b77e1a67d83d1ae5953f93: Merge remote-tracking branch 'origin/main' into feat/352-curriculum-lens-syllabus-gag-order (@zoharbabin)
- a7ac37794ef424051a784a57c0e32f96e1776785: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- 0a84e10acbe6bd81bc597220d1e9511467e7428b: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- 4a8d8bf59f2c0decc0057c84efe53c3f5e2bff1b: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- de3a6c92757756b812d9a69184db782ef86693f5: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- c33db75f3012392482ed361f8099448c7d64c455: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- 87695a305b54132f681f4d2e037b9acda6fbc598: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- 09877852670a1ab2d1172305d5906e0b7812a1cb: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- b1863c2898ee5466cf96e97c8ce1aca5ce3b544e: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- 3548df0d6b8f7123eab0558f8cdd9e770ab02da6: chore(harness): add v1.45.0 Academic Research Depth regression gate (@zoharbabin)
- e459ade33f74645452b53bb08923929a2caf42f0: feat(search,tools): add curriculum lens + syllabus_search + gag_order_search (#352) (@zoharbabin)
- d22b7bb03cbc8fa41fdf70ab56487d4ac29394a4: fix(scraper,search): resolve YouTube caption PO Token block and improve PubMed full-text hit rate (#429) (@zoharbabin)
- 798bc1fc6efe8f12c03203d75eb1a79c61f32eed: fix(search,tools): citation_graph DOI-seed fallback, filing_search form_type inference, econ_search popularity, verify_recommendation lens selection (#435) (@zoharbabin)
Docker Images
# GitHub Container Registry
docker pull ghcr.io/zoharbabin/web-researcher-mcp:1.45.1
# Docker Hub
docker pull docker.io/zoharbabin/web-researcher-mcp:1.45.1
Homebrew
brew install zoharbabin/tap/web-researcher-mcp
Verify Checksums
sha256sum -c checksums.txt
Security Fixes
- dep: GHSA-hrxh-6v49-42gf – bump gosec to pull patched grpc dependency fixing vulnerability
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Web Researcher MCP
All releases →Related context
Beta — feedback welcome: [email protected]