4 min read
News Brief Three GitHub advisories published October 27, 2026 cover the MCP Python SDK: bearer tokens accepted without an audience check, cross-origin redirects that leak headers, and tool output schemas that make clients fetch URLs. Fixed in 1.30.0 and 2.2.0.