Starstruk Logo MarkStarstruk

mcp-v1.0.2

umami-software/umamimcp-v1.0.2Mar 11, 2026by danielchalef

AI Summary

This is a security-focused patch release that addresses a Cypher injection vulnerability in the `graphiti-core` dependency by requiring version 0.28.2 or higher.

Key Highlights

  • Security update: Requires graphiti-core>=0.28.2
  • Fixes Cypher injection vulnerability present in v1.0.1 and prior
  • Bumps mcp-server to version 1.0.2

Breaking Changes

  • Requires graphiti-core>=0.28.2 (v1.0.1 and prior used 0.28.1)

Full Release Notes

MCP v1.0.1 and prior has a security cypher injection vulnerability via `graphiti-core` 0.28.1. Please update to MCP v1.0.2.

## What's Changed
* Bump mcp-server to 1.0.2 and require graphiti-core>=0.28.2 by @danielchalef in https://github.com/getzep/graphiti/pull/1317


**Full Changelog**: https://github.com/getzep/graphiti/compare/v0.28.2...mcp-v1.0.2