v2026.08.27 v1.5.1

medium risk

vectorize-io/hindsightAug 27, 2026 → Aug 28, 20261 day between releases

What's New

Adds MCP server support and new username/email modules while hardening input encoding and isolating batch scans.

New Features

  • Added Model Context Protocol (MCP) server support for external tooling integrations.
  • Added new username modules for CodePen, Clubhouse, DevHunt, character.ai, and other platforms.
  • Added new email modules for Canva, Figma, Atlassian, and a new dating category.

Improvements

  • URL and query inputs are now encoded to prevent injection issues.
  • Batch scans are now isolated into separate PDF reports to improve reliability.

Bug Fixes

  • Fixed PDF report generation isolation for batch scans.
  • Fixed curl_cffi timeout issues.

Upgrade Notes

Review the Service-binding migration mentioned in the previous release to ensure unauthorized bindings are handled. No configuration changes are required for the new MCP server support, but existing workflows using the old modules may need updates.

The Two Releases

v2026.08.27

v2026.08.27

Aug 27, 2026· 2 months ago

This is a critical security release fixing four vulnerabilities: command injection in PdfInfoAgent, unauthorized OAuth Service binding, unauthorized event propagation, and duplicate event delivery in concurrent scans.

Full release notes
v1.5.1

v1.5.1

Aug 28, 2026· 2 months ago

Continues module expansion with new username and email sources and introduces Model Context Protocol (MCP) server support alongside security hardening for input encoding.

Full release notes