The MCP Security Reckoning: 10 SDK Advisories in 8 Days
Ten MCP SDK advisories landed between 28 September and 5 October 2026 — six Python, four TypeScript. A flaw in the SDK is a flaw in every agent built on it, and two of these fixes are inert until you enable them by hand.
Devdatta Narawade8 min