MCP Inspector 2.14.0 fixes three privately reported vulnerabilities and changes developer-facing behavior
Photo: Forkast
MCP Inspector 2.14.0 was timestamped at 23:55:33 UTC on November 4 in the project’s release feed . The 2.14.0 release notes say the update fixes three vulnerabilities reported privately against v2. They identify one of the three, GHSA-2fw8-7jmw-r937, as also affecting the deprecated v1 line; the release notes point to v1.0.4 as the fix there. The page does not assign severity or give a broader affected-version range. The update also changes several behaviors developers can see while using the Inspector. For MCP Apps, the proxy enforces a sandbox-frame policy built from the app’s approved Content Security Policy grants.
Source: Forkast
