#nextjs
1 post
-
MCP got two advisories in one week and neither is a code bug
On September 28th and 30th, two MCP security issues landed: one in the official Python SDK, one in the next dev MCP endpoint. Both are trust boundary failures, not implementation bugs. I had written about MCP in production days earlier, so I read both advisories in full.