https://mcp-news.com/news/rust-sdk-promoted-to-tier-1 MCP News en 2026-08-21 Rust SDK promoted to Tier 1, joining TypeScript, Python, C# and Go https://mcp-news.com/news/spring-ai-mcp-transport-unbounded-sessions MCP News en 2026-08-21 Spring AI discloses unbounded session retention in its MCP Streamable HTTP transport, fixed in 2.0.1 https://mcp-news.com/news/ckan-mcp-ssrf-filter-bypass-cve MCP News en 2026-08-21 CVE record published for a CKAN MCP Server SSRF filter bypass fixed in May https://mcp-news.com/news/n8n-mcp-rce-and-credential-cves-reach-nvd MCP News en 2026-08-20 CVE records published for n8n's MCP node-schema RCE and a cross-project credential bypass, both fixed August 5 https://mcp-news.com/news/rmcp-3-1-4-hardens-request-state-signing MCP News en 2026-08-20 rmcp 3.1.4 requires 32-byte signing keys for MRTR request state and stops Debug from printing OAuth secrets