-
Notifications
You must be signed in to change notification settings - Fork 3.9k
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
check_resource_allowed treats /api/../admin as under /api
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3464 In modelcontextprotocol/python-sdk;DNS rebinding :* allowlist matches Host/Origin suffixes that are not ports
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3463 In modelcontextprotocol/python-sdk;- Status: Open.#3457 In modelcontextprotocol/python-sdk;
1.x: streamable_http client leaves a request unresolved when the SSE response stream ends without a response (fixed on 2.x by #3047 — backport request for v1.x)
v1Affects the v1.x maintenance lineAffects the v1.x maintenance lineStatus: Open.#3441 In modelcontextprotocol/python-sdk;[v2] modern streamable HTTP watch_disconnect can busy-loop and peg a CPU core
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3439 In modelcontextprotocol/python-sdk;TransportSecuritySettings.allowed_hosts is compared case-sensitively (NOT RFC 9110 compliant), so an uppercase host entry (the Windows default) rejects every fetch-based client with 421
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3437 In modelcontextprotocol/python-sdk;In-process callback failures break tool calls and notification sends
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3434 In modelcontextprotocol/python-sdk;coerce_request_id() folds non-canonical numeric strings, conflating wire-distinct JSON-RPC ids
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3432 In modelcontextprotocol/python-sdk;test_safe_join_rejects_symlink_escape fails on Windows without elevation or Developer Mode
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3408 In modelcontextprotocol/python-sdk;Tool input schemas carry a pydantic-derived title on every property
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3391 In modelcontextprotocol/python-sdk;[v2] Expose request cancellation on MCPServer tool Context
v2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3389 In modelcontextprotocol/python-sdk;A tool returning a non-finite float puts invalid JSON in the text content block
v1Affects the v1.x maintenance lineAffects the v1.x maintenance linev2Affects the v2 line (2.x on main)Affects the v2 line (2.x on main)Status: Open.#3385 In modelcontextprotocol/python-sdk;