update-pinned-version

quuu · quuu · commit 5a9204036b68 · 2026-01-07T11:46:00.000-08:00
diff --git a/.changeset/tidy-dancers-yawn.md b/.changeset/tidy-dancers-yawn.md
@@ -0,0 +1,5 @@
+---
+"mcp-handler": patch
+---
+
+Update pinned version of MCP TS SDK to 1.25.2 for vulnerability patch
diff --git a/README.md b/README.md
@@ -5,10 +5,10 @@ A Vercel adapter for the Model Context Protocol (MCP), enabling real-time commun
 ## Installation
 
 ```bash
-npm install mcp-handler @modelcontextprotocol/sdk@1.25.0 zod@^3
+npm install mcp-handler @modelcontextprotocol/sdk@1.25.2 zod@^3
 ```
 
-> **Note**: The recommended version for `@modelcontextprotocol/sdk` is 1.25.0
+> **Note**: Versions of `@modelcontextprotocol/sdk` prior to 1.25.1 have a security vulnerability. Use version 1.25.2 or later.
 
 ## Quick Start (Next.js)
 
diff --git a/package.json b/package.json
@@ -69,7 +69,7 @@
     "zod": "^3.25.50"
   },
   "peerDependencies": {
-    "@modelcontextprotocol/sdk": "^1.25.1",
+    "@modelcontextprotocol/sdk": "1.25.2",
     "next": ">=13.0.0"
   },
   "peerDependenciesMeta": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"mcp-handler": patch
 +---
++
 +Update pinned version of MCP TS SDK to 1.25.2 for vulnerability patch