Starstruk Logo MarkStarstruk

mcp-v1.0.2

getzep/graphitimcp-v1.0.2Mar 11, 2026by danielchalef

AI Summary

This security patch updates the MCP server to require graphiti-core >= 0.28.2 to address a Cypher injection vulnerability present in the core library.

Key Highlights

  • Security update to fix Cypher injection vulnerability.
  • Requires graphiti-core >= 0.28.2.

Breaking Changes

  • Requires graphiti-core >= 0.28.2 due to security vulnerability in 0.28.1.

New Features

  • Security patch for Cypher injection

Full Release Notes

MCP v1.0.1 and prior has a security cypher injection vulnerability via `graphiti-core` 0.28.1. Please update to MCP v1.0.2.

## What's Changed
* Bump mcp-server to 1.0.2 and require graphiti-core>=0.28.2 by @danielchalef in https://github.com/getzep/graphiti/pull/1317


**Full Changelog**: https://github.com/getzep/graphiti/compare/v0.28.2...mcp-v1.0.2