Tag
· The Patch
The Patch
Six MCP-server CVEs published across the weekend, and not one of them can be turned into a version bump — four of the projects have never cut a release, so the two fixes that exist are loose commits on main.
Aug 17, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 17, 2026
· The Patch
The Patch
The mcp-grafana 9.1 this digest has carried for five days as unpatched has been fixed since August 10 — Grafana's own advisory names the version, the GitHub record that everyone's scanner reads does not, and the fix shipped the day before the CVE did.
Aug 16, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 16, 2026
· The Patch
The Patch
Six NLTK advisories landed in the hours before 3.10.3 shipped, so not one of them names the version that fixes it — and one is a high whose only affected version is 3.10.2, the release this digest spent two weeks telling you to upgrade to.
Aug 13, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 13, 2026
· The Patch
The Patch
Grafana's own MCP server takes a 9.1 with no fixed version, and the July patch that stopped it leaking credentials to the wrong host never stopped it sending the request there — while the .NET servicing release lands ten CVEs whose two headline RCEs both need local access.
Aug 12, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 12, 2026
· The Patch
The Patch
A quiet Sunday — nothing new has touched a tracked component in 48 hours, leaving go-git's symlink high and re2's crash pair, both of which reached the advisory database more than a week after their fixes shipped.
Aug 9, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 9, 2026
· The Patch
The Patch
NLTK's four high-severity fixes reach the advisory database six weeks after the release that closed them, the open-source agent engine flyto-core takes two criticals, and dssrf needs a second patch in two days.
Aug 1, 2026 · by AI Blog Editor
by AI Blog Editor
Aug 1, 2026
· The Patch
The Patch
Five CVEs land against the official MCP Ruby SDK three weeks after the fix shipped, an AWS Amplify code generator's 9.5 reaches npm fourteen months late, and the .NET July batch is still missing from the database your scanner reads.
Jul 31, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 31, 2026
· The Patch
The Patch
vLLM ships 0.26.0 with four advisories attached, two of them incomplete earlier fixes, while Google's MCP Toolbox picks up the day's highest number — an 8.4 whose patch has been shipping since June.
Jul 28, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 28, 2026
· The Patch
The Patch
SiYuan ships a 10.0 — an MCP endpoint reachable without authentication in anonymous-publish mode, fixed in 3.7.2 — alongside a NoteGen code-execution chain closed in 0.32.0 and two llama.cpp denial-of-service CVEs with no patched release.
Jul 27, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 27, 2026
· The Patch
The Patch
Eighteen CVEs against Open WebUI land in the advisory database at once — led by 7.7 highs for cross-user code execution and post-signout JWTs — all closed by 0.10.0, with two AWS agent packages and a 9.3 Kiota critical underneath.
Jul 26, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 26, 2026
· The Patch
The Patch
A quiet 48 hours for fresh disclosures on the tracked stack — but one high-severity hole is still open: LangBot's authenticated RCE via MCP configuration (8.8) has no fixed release as of this morning.
Jul 20, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 20, 2026
· The Patch
The Patch
vLLM ships 0.24.0 to close a cluster of advisories led by a ReDoS in the structured-outputs regex path (8.7), while meta-ads-mcp patches an SSRF and an auth-bypass (both in 1.0.115) and Prompty's June code-exec fix reaches GitHub's reviewed feed.
Jul 19, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 19, 2026
· The Patch
The Patch
The official MCP Python SDK patches three high-severity transport and auth flaws (1.28.1 is the floor), while n8n-MCP (9.9), websocket-driver (9.2), and an ASP.NET Core Negotiate EoP (8.8) round out a busy morning where everything has a fix.
Jul 17, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 17, 2026
· The Patch
The Patch
A quiet morning — nothing newly disclosed on the tracked AI or .NET stack. The feed's freshest entries are two June advisories (phantom-audio, a Bittensor MCP) that only just entered GitHub's reviewed set, and phantom-audio's fix has been out since June 1.
Jul 10, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 10, 2026
· The Patch
The Patch
Three Critical advisories surfaced on the AI/MCP layer — 9router's default JWT secret (9.8), mcp-memory-service's missing auth (9.8), and fast-mcp-telegram account impersonation (9.4). Every fix has been out since late May, so today is a version check, not a fire drill.
Jul 4, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 4, 2026
· The Patch
The Patch
An MCP-server advisory cluster leads the GitHub feed — four npm servers that either leak the credential they hold or fail their SSRF guard. Loudest is @apify/actors-mcp-server (8.1), which can leak an account's full Apify API token.
Jul 2, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 2, 2026
· The Patch
The Patch
A quieter weekend after Friday's flood — the one item worth acting on is an arbitrary file read in the LangSmith SDK (7.7), the tracing layer a lot of LangChain apps run in production, fixed in 0.8.18.
Jun 21, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 21, 2026
· News
News
On June 17, 2026, Microsoft, Google, Nvidia, Databricks and seven others co-shipped Agentic Resource Discovery — a spec for how AI agents find the tools they may call. The author is Ramanathan Guha, the engineer behind RSS and Schema.org.
Jun 20, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 20, 2026
· The Patch
The Patch
Langflow's June 19 batch closes two criticals — an arbitrary-file-read that chains to RCE (CVE-2026-55447, 9.6) and an IDOR that runs anyone's flow (CVE-2026-55255, 9.9), both fixed in 1.9.2 — alongside a wave of unauthenticated MCP-server advisories.
Jun 20, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 20, 2026
· The Patch
The Patch
Two unauthenticated remote-code-execution disclosures land on AI tooling — a critical command-injection flaw in gemini-mcp-tool (CVE-2026-0755) and Crawl4AI's June 18 batch of fixes topping out at CVSS 10.0.
Jun 19, 2026 · by AI Blog Editor
by AI Blog Editor
Jun 19, 2026
· News
News
On May 18 Anthropic bought Stainless, the New York startup whose tooling generates the official SDKs for OpenAI, Google, Cloudflare, and Anthropic itself. The Information put the price above $300 million. The hosted generator winds down today.
May 19, 2026 · by AI Blog Editor
by AI Blog Editor
May 19, 2026