Merge pull request #1153 from cipherstash/fix/cip-4887-modelcontextprotocol-sdk

fix(deps): patch @modelcontextprotocol/sdk to 1.32.0

Author: tobyhede

.changeset/wizard-mcp-sdk-security-pin.md

@@ -0,0 +1,9 @@
+---
+"@cipherstash/wizard": patch
+---
+
+Add `@modelcontextprotocol/sdk` `^1.32.0` as a direct dependency so the
+auto-installed peer of `@anthropic-ai/claude-agent-sdk` resolves to a release
+patched against GHSA-6qxp-vccf-f47h / CVE-2026-104850, instead of the vulnerable
+1.29.0 previously locked. The wizard never imports the MCP SDK directly — this
+is a peer-resolution pin only; no API change.

e2e/tests/supply-chain.e2e.test.ts

@@ -291,6 +291,22 @@ describe('supply chain — pnpm-lock.yaml integrity', () => {
       ).toBe(true)
     }
   })
+
+  it('@modelcontextprotocol/sdk resolves to the peer-pinned patched version (≥ 1.31.0)', () => {
+    // Peer-resolution pin, like @anthropic-ai/sdk above: languages/typescript/packages/wizard
+    // depends on @modelcontextprotocol/sdk@^1.32.0 to force the auto-installed
+    // peer of @anthropic-ai/claude-agent-sdk past the advisory-vulnerable range
+    // (GHSA-6qxp-vccf-f47h / CVE-2026-104850, patched 1.31.0).
+    const versions =
+      resolvedVersionsByName().get('@modelcontextprotocol/sdk') ?? []
+    expect(versions.length).toBeGreaterThan(0)
+    for (const version of versions) {
+      expect(
+        semver.gte(version, '1.31.0'),
+        `@modelcontextprotocol/sdk@${version} is below the patched 1.31.0`,
+      ).toBe(true)
+    }
+  })
 })
 
 describe('supply chain — every workflow installs with --frozen-lockfile', () => {

languages/typescript/packages/wizard/package.json

@@ -34,6 +34,7 @@
 		"@anthropic-ai/sdk": "^0.117.1",
 		"@cipherstash/auth": "workspace:*",
 		"@clack/prompts": "1.7.0",
+		"@modelcontextprotocol/sdk": "^1.32.0",
 		"dotenv": "17.4.2",
 		"pg": "8.23.0",
 		"picocolors": "^1.1.1",

pnpm-lock.yaml

@@ -66,6 +66,10 @@ catalogs:
 # pnpm overrides rewrite peer ranges, not peer resolutions. It is fixed by an
 # explicit dependency in languages/typescript/packages/wizard — that dep is a peer-resolution pin
 # (wizard never imports the sdk directly); do not remove it as "unused".
+# The same applies to @modelcontextprotocol/sdk (alert #247,
+# GHSA-6qxp-vccf-f47h / CVE-2026-104850, patched 1.31.0): another auto-installed
+# peer of claude-agent-sdk (`^1.29.0`), pinned by the same kind of explicit
+# wizard dependency.
 overrides:
   # #96, #115-#127 — Next.js middleware bypass / SSRF / DoS / XSS batch
   # (GHSA-267c-6grr-h53f, GHSA-26hh-7cqf-hhc6, GHSA-36qx-fr4f-26g5, et al.)