---
'@modelcontextprotocol/core': patch
'@modelcontextprotocol/server': patch
---

Fix ReDoS vulnerability in UriTemplate regex patterns (CVE-2026-0621)