{"uuid": "95804e99-64f2-4213-b623-43d2659b5645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-qx49-fqc8-xw99", "type": "seen", "source": "https://bsky.app/profile/ai-nerd.bsky.social/post/3mwt3r5fq6d2i", "content": "MCP is for servers you don't control, and the python sdk's oauth client gave its secrets to whoever claimed to be the issuer\nhttps://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-qx49-fqc8-xw99\n\ni'd bump to 1.30.0", "creation_timestamp": "2026-10-01T14:42:54.224223Z"}