@defai.digital/ax-cli 3.14.9 → 3.14.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +8 -2
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -49,7 +49,7 @@ ax-cli
49
49
  - [Security](#security)
50
50
  - [Architecture](#architecture)
51
51
  - [Changelog](#changelog)
52
- - [Recent Changes (v3.14.9)](#recent-changes-v3149)
52
+ - [Recent Changes (v3.14.10)](#recent-changes-v31410)
53
53
  - [Documentation](#documentation)
54
54
 
55
55
  ---
@@ -404,7 +404,13 @@ Email: **security@defai.digital** (private disclosure)
404
404
 
405
405
  ---
406
406
 
407
- ## Recent Changes (v3.14.9)
407
+ ## Recent Changes (v3.14.10)
408
+
409
+ ### Security Fix
410
+
411
+ - **MCP SDK Update**: Updated `@modelcontextprotocol/sdk` from 1.22.0 to 1.24.0 to fix DNS rebinding protection vulnerability (GHSA-w48q-cv73-mx4w)
412
+
413
+ ## Previous Changes (v3.14.9)
408
414
 
409
415
  ### AST Parser Simplification
410
416
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@defai.digital/ax-cli",
3
- "version": "3.14.9",
3
+ "version": "3.14.10",
4
4
  "sdkVersion": "1.3.0",
5
5
  "description": "Enterprise-Class AI Command Line Interface - Primary support for GLM (General Language Model) with multi-provider AI orchestration powered by AutomatosX.",
6
6
  "type": "module",
@@ -80,7 +80,7 @@
80
80
  "dependencies": {
81
81
  "@ax-cli/schemas": "workspace:*",
82
82
  "@clack/prompts": "^0.11.0",
83
- "@modelcontextprotocol/sdk": "^1.22.0",
83
+ "@modelcontextprotocol/sdk": "^1.24.0",
84
84
  "@types/ws": "^8.18.1",
85
85
  "axios": "^1.7.0",
86
86
  "chalk": "^5.3.0",