github/OpenHands
1
0
Fork 0
mirror of https://github.com/OpenHands/OpenHands.git synced 2026-03-22 05:37:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

remove mcp version check for cve_2025_66416 (#13277)

Browse Source
This commit is contained in:
aivong-openhands
2026-03-09 09:38:44 -05:00
committed by GitHub
parent c8fe39b176
commit ef840b046a
1 changed files with 0 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
tests/unit/mcp/test_cve_2025_66416.py
View File

@@ -13,44 +13,9 @@ parameter is 127.0.0.1 or localhost. This is enforced through TransportSecurityS
Reference: https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-9h52-p55h-vw2f
"""
import importlib.metadata
import re
import pytest
class TestMCPVersionRequirement:
"""Test that MCP version meets the security requirement."""
def test_mcp_version_is_1_23_0_or_higher(self):
"""Verify mcp version is >= 1.23.0 to include CVE-2025-66416 fix."""
version = importlib.metadata.version('mcp')
# Parse version string (e.g., "1.25.0" -> (1, 25, 0))
version_parts = [int(x) for x in re.split(r'[.-]', version)[:3]]
major, minor, patch = (version_parts + [0, 0, 0])[:3]
# CVE-2025-66416 was fixed in mcp 1.23.0
assert (major, minor, patch) >= (1, 23, 0), (
f'MCP version {version} is vulnerable to CVE-2025-66416. '
f'Minimum required version is 1.23.0.'
)
def test_mcp_version_is_1_25_0_or_higher_preferred(self):
"""Verify mcp version is >= 1.25.0 for complete security hardening."""
version = importlib.metadata.version('mcp')
# Parse version string
version_parts = [int(x) for x in re.split(r'[.-]', version)[:3]]
major, minor, patch = (version_parts + [0, 0, 0])[:3]
# 1.25.0 is the recommended version with all security improvements
assert (major, minor, patch) >= (1, 25, 0), (
f'MCP version {version} should be upgraded to 1.25.0+ '
f'for complete CVE-2025-66416 security hardening.'
)
class TestTransportSecuritySettingsAvailability:
"""Test that TransportSecuritySettings is available for DNS rebinding protection."""