From 9c85dfb57d6a366b88f98cc3aa88469fad5b22d3 Mon Sep 17 00:00:00 2001 From: NorD Date: Tue, 6 Oct 2026 23:50:47 +0300 Subject: [PATCH 1/4] fix(docker): pin @modelcontextprotocol/sdk@1.31.0 for CVE-2026-104850 Upstream opencodex still declares "^1.30.0" and resolves to 1.30.0, which is vulnerable (GHSA-6qxp-vccf-f47h). Packaging-only bump within the allowed range, same pattern as the existing fast-uri patch. Unblocks publish of v2.79.0 (issue #5). Does not change Trivy thresholds, .trivyignore, workflows, or compose. --- Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Dockerfile b/Dockerfile index ec6959b..b80170e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -46,6 +46,9 @@ RUN --mount=type=cache,target=/home/bun/.bun/install/cache \ # Patch fast-uri to >=3.1.6 within upstream's specified "^3.1.5" range to resolve CVE-2026-75899 et al. RUN bun update fast-uri +# Patch @modelcontextprotocol/sdk to >=1.31.0 within upstream "^1.30.0" (CVE-2026-104850 / GHSA-6qxp-vccf-f47h). +RUN bun update @modelcontextprotocol/sdk@1.31.0 + # Build the GUI (vite) exactly as upstream's own `build:gui` does. RUN cd gui && bun install --frozen-lockfile && bun run build From 44d3b5ae86416a9d2a6a705ed9cdaeb7d2277368 Mon Sep 17 00:00:00 2001 From: NorD Date: Tue, 6 Oct 2026 23:59:23 +0300 Subject: [PATCH 2/4] fix(docker): also pin proxy-addr@2.0.8 for CVE-2026-90711 Trivy on the PR build (after MCP SDK bump) still blocked on CRITICAL proxy-addr 2.0.7. Packaging-only in-tree update to 2.0.8; same pattern as fast-uri / @modelcontextprotocol/sdk patches. --- Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Dockerfile b/Dockerfile index b80170e..c46f211 100644 --- a/Dockerfile +++ b/Dockerfile @@ -49,6 +49,9 @@ RUN bun update fast-uri # Patch @modelcontextprotocol/sdk to >=1.31.0 within upstream "^1.30.0" (CVE-2026-104850 / GHSA-6qxp-vccf-f47h). RUN bun update @modelcontextprotocol/sdk@1.31.0 +# Patch proxy-addr to >=2.0.8 (CVE-2026-90711 / GHSA-jqcg-44mw-7w3h). +RUN bun update proxy-addr@2.0.8 + # Build the GUI (vite) exactly as upstream's own `build:gui` does. RUN cd gui && bun install --frozen-lockfile && bun run build From fe68c4546480f3d06b6fca2195cb67bc88ee09ef Mon Sep 17 00:00:00 2001 From: NorD Date: Wed, 7 Oct 2026 00:04:20 +0300 Subject: [PATCH 3/4] fix(docker): unpin sdk and proxy-addr bun updates Align with fast-uri style: bun update @modelcontextprotocol/sdk and bun update proxy-addr without version pins (CVE-2026-104850 / CVE-2026-90711). --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index c46f211..3db8622 100644 --- a/Dockerfile +++ b/Dockerfile @@ -47,10 +47,10 @@ RUN --mount=type=cache,target=/home/bun/.bun/install/cache \ RUN bun update fast-uri # Patch @modelcontextprotocol/sdk to >=1.31.0 within upstream "^1.30.0" (CVE-2026-104850 / GHSA-6qxp-vccf-f47h). -RUN bun update @modelcontextprotocol/sdk@1.31.0 +RUN bun update @modelcontextprotocol/sdk # Patch proxy-addr to >=2.0.8 (CVE-2026-90711 / GHSA-jqcg-44mw-7w3h). -RUN bun update proxy-addr@2.0.8 +RUN bun update proxy-addr # Build the GUI (vite) exactly as upstream's own `build:gui` does. RUN cd gui && bun install --frozen-lockfile && bun run build From a3567d5b8e64dc5fb841bb4e41cd709d2ceca855 Mon Sep 17 00:00:00 2001 From: NorD Date: Wed, 7 Oct 2026 00:04:42 +0300 Subject: [PATCH 4/4] fix(ci): PR-smoke against upstream v2.79.0 --- .github/workflows/pull-request.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index b9530aa..04eb10c 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -23,7 +23,7 @@ jobs: id-token: write attestations: write with: - version: '2.59.0' - commit: '134c92a01b120162f00c7275189cc47858720379' + version: '2.79.0' + commit: 'beba8b7e5e479f3d8b4d404e3e47cf4aaef4d936' publish: false secrets: inherit