AINewsnow

A repo's .git/config could run programs through MCP's git server: 6 fixes in v2.4.0 and 4 checks for your configs

The reference MCP servers most of us bolt into a client config without a second thought shipped six security fixes on November 11. Three servers are affected: the filesystem server, the git server and the fetch server. One of the six is rated high, and it sits in the git server: a read-only status…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-14 15:10 · DEV Community — AI
    A repo's .git/config could run programs through MCP's git server: 6 fixes in v2.4.0 and 4 checks for your configs

More stories

  1. Jensen Huang resigns as Nvidia CEO amid China spy scandal — TechCrunch AI
  2. Google connects Wallet to Gemini for personal finance insights in the U.S. — Google AI Blog
  3. Anthropic's IPO roadshow proceeds amid market turmoil as Amodei brushes off turbulence — Bloomberg AI
  4. Anthropic CEO Amodei calls compute a 'huge uncertainty' days before record IPO — Business Insider AI
  5. Anthropic’s IPO Is About Six Times Oversubscribed — Bloomberg AI
  6. OpenAI Board Member Warns AI Takeover Could Be Months Away — Gizmodo AI
  7. Hydra-PSIE expands 'Coeziune OM–IA' DOI registry to 60 published works — DEV Community — AI
  8. OpenAI launches ChatGPT Wallet for AI agent purchases — OpenAI News

Get the daily brief of stories like this at 6:30 every morning →