Dev.to
7/31/2026

The original title is: "MCP 2.0 + Security Patches: Rails RCE, Nuxt Updates"
Original: MCP 2.0 + Security Patches: Rails RCE, Nuxt Updates
Short summary
mcp-handler 2.0.0 implements the latest MCP spec with stateless Streamable HTTP transport, eliminating session dependencies for serverless deployments but removing SSE endpoints entirely. AI Gateway passes through major upstream changes: Luna tokens are 80% cheaper, Sol fast mode is 2.5x faster, and ThinkingMachines' Inkling-small variant adds zero-data-retention support. Two critical Rails RCEs in Active Storage's vips processor require immediate patching to 7.2.3.2, 8.0.5.1, or 8.1.3.1 with libvips ≥ 8.13.
- •MCP 2.0 enables stateless serverless deployment but removes SSE endpoints — migrate clients before upgrading
- •Luna tokens 80% cheaper and Sol 2.5x faster via AI Gateway with no code changes required
- •Critical Rails RCE in Active Storage vips processor — patch immediately and verify libvips ≥ 8.13
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



