Starstruk Logo MarkStarstruk

v4.16.14

punkpeye/fastmcpv4.16.14Aug 31, 2026by github-actions[bot]

AI Summary

A maintenance release addressing a security vulnerability and improving prompt handling logic.

Key Highlights

  • Fixes open redirect bypass vulnerability
  • Ensures complete enum values are returned

Full Release Notes

## [4.16.14](https://github.com/punkpeye/fastmcp/compare/v4.16.13...v4.16.14) (2026-08-31)


### Bug Fixes

* **auth:** reject userinfo in redirect URIs to close a loopback-default open-redirect bypass ([#346](https://github.com/punkpeye/fastmcp/issues/346)) ([830ce87](https://github.com/punkpeye/fastmcp/commit/830ce874ee5582f1f0a288f28cac1c3f174a2c00))
* complete all enum values when the prompt argument value is empty ([#345](https://github.com/punkpeye/fastmcp/issues/345)) ([0e0eed8](https://github.com/punkpeye/fastmcp/commit/0e0eed80c9d427e11415d6c27d8d56f5d34a7357))