Skip to content
This repository was archived by the owner on Jul 8, 2026. It is now read-only.

Commit 97d788f

Browse files
committed
Resolve modelcontextprotocol CVE - upgrade to latest @modelcontextprotocol/sdk + upgrade peer dependency zod to minimum supported version by @modelcontextprotocol/sdk (v3.25)
1 parent eb4ca44 commit 97d788f

2 files changed

Lines changed: 12 additions & 21 deletions

File tree

package-lock.json

Lines changed: 10 additions & 19 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,14 +33,14 @@
3333
"typescript": "^5"
3434
},
3535
"dependencies": {
36-
"@modelcontextprotocol/sdk": "^1.25.1",
36+
"@modelcontextprotocol/sdk": "^1.27.1",
3737
"@shortcut/client": "^3.2.0",
3838
"dotenv": "^17.2.3",
3939
"express": "^4.18.2",
4040
"jose": "^6.1.3",
4141
"pino": "^9.5.0",
4242
"pino-http": "^10.3.0",
43-
"zod": "^3.24.4"
43+
"zod": "^3.25.76"
4444
},
4545
"scripts": {
4646
"test": "bun test",

0 commit comments

Comments
 (0)