[Snyk] Security upgrade @modelcontextprotocol/sdk from 1.10.1 to 1.24.0

[snyk-io]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Insecure Default Initialization of Resource SNYK-JS-MODELCONTEXTPROTOCOLSDK-14171914	666

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

---

Note

Upgrades MCP SDK and updates lockfile with broad transitive bumps (express, pino, zod) and new SDK deps (ajv, jose).

• Dependencies:
  • Upgrade @modelcontextprotocol/sdk to ^1.24.0 in package.json and lockfile.
  • Add/new via SDK: ajv, ajv-formats, eventsource-parser, jose, updated pkce-challenge and cross-spawn; widen zod peer range.
  • Bump @modelcontextprotocol/inspector to ^0.12.0.
  • Update zod to ^3.25.7 and resolve to 3.25.76.
  • pino declared ^9.7.0 (resolved 9.14.0).
  • Refresh transitive stack: express@5.2.1, body-parser@2.2.1, finalhandler@2.1.1, content-disposition@1.0.1, debug@4.4.3, eventsource@3.0.7, ws@8.18.3, statuses@2.0.2, etc.
  • Numerous UI-related transitive bumps (Radix UI, Floating UI, Tailwind) from inspector packages.

^{Written by Cursor Bugbot for commit e62f24d. This will update automatically on new commits. Configure here.}

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.