Back to feed
Dev.to
Dev.to
7/31/2026
The original title is: "MCP 2.0 + Security Patches: Rails RCE, Nuxt Updates"

The original title is: "MCP 2.0 + Security Patches: Rails RCE, Nuxt Updates"

Original: MCP 2.0 + Security Patches: Rails RCE, Nuxt Updates

Short summary

mcp-handler 2.0.0 implements the latest MCP spec with stateless Streamable HTTP transport, eliminating session dependencies for serverless deployments but removing SSE endpoints entirely. AI Gateway passes through major upstream changes: Luna tokens are 80% cheaper, Sol fast mode is 2.5x faster, and ThinkingMachines' Inkling-small variant adds zero-data-retention support. Two critical Rails RCEs in Active Storage's vips processor require immediate patching to 7.2.3.2, 8.0.5.1, or 8.1.3.1 with libvips ≥ 8.13.

  • MCP 2.0 enables stateless serverless deployment but removes SSE endpoints — migrate clients before upgrading
  • Luna tokens 80% cheaper and Sol 2.5x faster via AI Gateway with no code changes required
  • Critical Rails RCE in Active Storage vips processor — patch immediately and verify libvips ≥ 8.13

Generated with AI, which can make mistakes.

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more