crates.io/rmcp: medium

rmcp OAuth client fetches server-controlled resource_metadata URLs

Action: Upgrade rmcp to 2.0.0 or later.

cargo update -p rmcp --precise 2.0.0

Affected

Fixed versions

Sources

• osv: GHSA-c9xm-49cp-xcr9
• https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-c9xm-49cp-xcr9
• https://github.com/modelcontextprotocol/rust-sdk/pull/935
• https://github.com/modelcontextprotocol/rust-sdk/commit/eb435c6f51864df74926ef115befce55c16b01ba
• https://github.com/modelcontextprotocol/rust-sdk
• https://github.com/modelcontextprotocol/rust-sdk/releases/tag/rmcp-v2.0.0

published 2026-10-02T16:12:31Z · modified 2026-10-02T16:30:07.619134114Z · JSON