This repository was archived by the owner on Jul 2, 2026. It is now read-only.
Repository navigation
fix(deps): update @modelcontextprotocol/sdk to resolve HIGH CVEs (fast-uri, hono) - #2304
Merged
corvid-agent merged 2 commits intoMay 9, 2026
Conversation
…handler The get, activate, pause, trigger, runs, and run_status actions all lacked ownership checks — any agent could read or mutate another agent's workflows/runs by guessing a UUID. Fix by verifying workflow.agentId === ctx.agentId after fetch and returning a "not found" error on mismatch. The runs action without a workflow_id now filters by ctx.agentId via a new agentId param on listWorkflowRuns. Adds 10 isolation tests in workflow-tool-handler.test.ts covering every sensitive action for both the rejection and allowed paths. Spec updated with a new invariant (9). Closes #2303 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Adds `fast-uri >=3.1.2` override (was missing) and bumps the existing `hono` override from `>=4.12.14` to `>=4.12.18`. Both are transitive dependencies of `@modelcontextprotocol/sdk`. Closes GHSA-v39h-62p7-jpjc (fast-uri host confusion — HIGH) Closes GHSA-q3j6-qgpj-74h6 (fast-uri path traversal — HIGH) Closes GHSA-qp7p-654g-cw7p (hono CSS injection — MODERATE) Closes GHSA-p77w-8qqv-26rm (hono cache cross-user leakage — MODERATE) Closes GHSA-9vqf-7f2p-gf9v (hono bodyLimit bypass — MODERATE) Closes GHSA-69xw-7hcm-h432 (hono JSX HTML injection — MODERATE) Closes GHSA-hm8q-7f3q-5f36 (hono JWT NumericDate — LOW) `bun audit` reports 0 vulnerabilities after this change. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
corvid-agent
requested review from
0xGaspar,
0xLeif,
Kyntrin and
tofu-ux
and removed request for
a team
May 9, 2026 10:11
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
✅ Corvin says...
_
<(^\ .oO(Caw! ^v^)
|/(\
\(\\
" "\\
"Caw! Your code sparkles like a dropped french fry."
CI Summary
| Check | Status |
|---|---|
| CI (tsc, tests, migrations) | ✅ Passed |
| Spec Validation | ✅ Passed |
📋 Spec Validation Details
✅ SpecSync: Passed
| Metric | Value |
|---|---|
| Specs checked | 220 |
| Passed | 220 |
| Errors | 0 |
| Warnings | 0 |
| File coverage | 100% (591/591) |
| LOC coverage | 100% (137058/137058) |
Generated by specsync · Run specsync check --format github to reproduce
Powered by corvid-pet
Collaborator
Author
|
👋 CorvidAgent is looking into this. |
Collaborator
Author
|
CI and spec validation both green — merging this dependency update. Thanks Corvin! 🪶 |
corvid-agent
deleted the
agent/rook/update-modelcontextprotocol-sdk-to-fix-moy6hrlh-6f0bbd
branch
May 9, 2026 10:18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
fast-uri >=3.1.2to package overrides (was absent), closing 2 HIGH CVEshonooverride from>=4.12.14to>=4.12.18, closing 4 MODERATE + 1 LOW CVEs@modelcontextprotocol/sdk → ajvand@modelcontextprotocol/sdk → @hono/node-server@modelcontextprotocol/sdkitself is already at the latest version (1.29.0); the upstream package does not yet pin patched transitive versions, so overrides are the correct fixCVEs Closed
Verification
bun audit→ 0 vulnerabilitiesfledge lanes run verify→ ✅ lint, typecheck, tests, spec-check all pass🤖 Generated with Claude Code