https://mcp-news.com/news/cloudflare-publishes-2026-07-28-engineering-post MCP News en 2026-08-06 Cloudflare publishes an engineering post on the 2026-07-28 revision and says createMcpHandler has graduated into the official TypeScript SDK https://mcp-news.com/news/missionsquad-mcp-api-two-cves MCP News en 2026-08-06 Two CVEs published for MissionSquad mcp-api, a command injection and an SSRF, each fixed in a point release https://mcp-news.com/news/aws-documentdb-mcp-server-read-only-bypass MCP News en 2026-08-05 AWS Labs DocumentDB MCP Server read-only mode bypassed via write-capable aggregation stages https://mcp-news.com/news/csharp-sdk-2-1-0-subscriptions-listen-handler MCP News en 2026-08-05 C# SDK v2.1.0 adds a public subscriptions/listen server handler and HTTP transport fallback fixes https://mcp-news.com/news/langflow-oss-mcp-cves-reach-nvd MCP News en 2026-08-05 Five MCP-related IBM Langflow OSS CVEs published to NVD, including an authentication bypass in the MCP composer endpoint https://mcp-news.com/news/mcp-inspector-2-1-0-sep-2243-header-mirroring MCP News en 2026-08-05 MCP Inspector 2.1.0 mirrors SEP-2243 x-mcp-header arguments to Mcp-Param-* on tools/call https://mcp-news.com/news/mongodb-mcp-server-2-0-0-removes-session-state MCP News en 2026-08-04 MongoDB's mongodb-mcp-server 2.0.0 removes session state and requires explicit connection ids