Model Context Protocol

Everything Patch Review has reported about Model Context Protocol: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Upgrade MCP SDK to 1.32.0 to block cross-user task access and privacy leaks in shared stores

A high-severity vulnerability in the Model Context Protocol SDK allows clients to access other users' tasks. Version 1.32.0 patches the issue.

Oct 21, 2026

Vulnerabilities

Upgrade MCP SDK and Server to Fix High-Severity Memory Exhaustion Flaw

Developers using Model Context Protocol packages must upgrade to 1.32.0 or 2.3.0 and configure new input limits to prevent server crashes.

Oct 20, 2026