Context Portal MCP v0.3.6 - Security Updates
Security Fixes
This release addresses critical security vulnerabilities in dependencies:
High Severity
- starlette CVE-2025-62727: Updated to >=0.49.1 to fix O(n^2) DoS vulnerability in Range header merging in starlette.responses.FileResponse
Moderate Severity
- urllib3 CVE-2025-50181 & CVE-2025-50182: Updated to >=2.5.0
Changes
Security
- Updated starlette to >=0.49.1 to remediate CVE-2025-62727 (High severity)
- Updated urllib3 to >=2.5.0 to remediate CVE-2025-50181 and CVE-2025-50182 (Moderate severity)
Packaging
- Updated project version to 0.3.6 in pyproject.toml
- Added explicit urllib3>=2.5.0 dependency to both requirements.txt and pyproject.toml
Upgrade Instructions
PyPI Users:
\\powershell
pip install --upgrade context-portal-mcp
\\
Docker Users:
\\powershell
docker pull greatscottymac/context-portal-mcp:latest
\\
All users are strongly encouraged to upgrade to address these security vulnerabilities.