Threats affecting pkg:brew/strands-agents-sops

The Model Context Protocol (MCP) Python SDK client versions 1.10.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability where the client fetches external URLs or local files referenced by server-declared output schemas during tool result validation. This can cause the client to make network or file system requests synchronously without timeout, potentially freezing the client session if the target is unresponsive. The issue affects clients calling tools on servers they do not fully control. Fixed in versions 1.30.0 and 2.2.0, the client now restricts reference resolution to within the schema document only.

The Model Context Protocol (MCP) Python SDK versions 1.8.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability where HTTP client transports follow cross-origin redirects and send custom headers and request bodies to the redirected host. This can expose sensitive headers such as API keys if an attacker can cause a trusted endpoint to redirect to a malicious or unintended host. The SDK now restricts redirects to the same origin or an http to https upgrade on the same host. Fixed in MCP SDK versions 1.30.0 and 2.2.0.