Thank you for helping keep the Model Context Protocol and its ecosystem secure.
| Version | Line | Support |
|---|---|---|
| 2.x (newest release) | current stable (main) |
bug fixes, security fixes, new features |
1.x newest release (v1.x branch) |
maintenance | critical bug fixes and security fixes |
| older 1.x releases, and all pre-releases | unsupported | upgrade to the newest 1.x release or to 2.x |
Only the newest release of a supported line receives fixes, so reproduce against
it before reporting. If your project depends on mcp and is not yet ready for
2.x, keep a <2 upper bound on your mcp requirement and follow the
migration guide when you
migrate.
If you discover a security vulnerability in this repository, please report it through the GitHub Security Advisory process for this repository.
Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
To help us triage and respond quickly, please include:
- A description of the vulnerability
- Steps to reproduce the issue
- The potential impact
- Any suggested fixes (optional)