x.comthreadSwif (@swif_ai) on X
A post from Swif (@swif_ai) on the MCP TypeScript server SDK versions 2.0 to 2.2. A single server instance shared across HTTP clients, the pattern shown in the README, could send one client's responses to another client. Version 2.3.0 refuses that setup, so servers must be built per request or per session. The post gives no code or advisory ID.
TL;DR Warns that MCP TypeScript SDK 2.0-2.2 could leak responses between HTTP clients on a shared server, and that 2.3.0 now refuses it.
Also seen from another angle🛡️ Security →
Organisations named here
- Model Context Protocol
- Swif
Technologies named here
- MCP TypeScript server SDK
- Model Context Protocol
- TypeScript
Related in mcp
github.comrepoOKX Agent Trade Kit (okx-trade-mcp / okx-trade-cli)
developers.googleblog.comarticleAnnouncing ADK for Kotlin 1.0: Building Production-Ready AI Agents in Kotlin, Android, and Beyond
github.comrepo