https://mcp-news.com/news/siyuan-asset-upload-path-traversal-cve MCP News en 2026-08-28 CVE-2026-82233: SiYuan's asset.upload MCP tool read arbitrary absolute paths; fourth MCP-tool record against the app in August https://mcp-news.com/news/vulncheck-batch-mcp-http-transport-cves MCP News en 2026-08-27 VulnCheck publishes twelve CVEs against MCP HTTP transports in one batch, from mcp-go to Dropbox Dash https://mcp-news.com/news/mcp-charters-transports-working-group MCP News en 2026-08-26 MCP charters the Transports Working Group; its roadmap plans against a 2026-12-15 specification release https://mcp-news.com/news/mcp-inspector-2-4-0-app-elicitations-secretstore MCP News en 2026-08-26 MCP Inspector 2.4.0 renders elicitation forms inside MCP Apps and adds a keychain-free secret store