Urgent.News

What's breaking now, across thousands of outlets.

Tech

CVE-2026-116686: CVE-2026-116686: Server-Side Request Forgery and Synchronous Denial of Service in Model Context Protocol…

CVE-2026-116686: Server-Side Request Forgery and Synchronous Denial of Service in Model Context Protocol Python SDK Vulnerability ID: CVE-2026-116686 CVSS Score: 6.5 Published: 2026-10-27 CVE-2026-116686 is a Server-Side Request Forgery (SSRF) and Denial of Service (DoS) vulnerability in the official Model Context Protocol (MCP) Python SDK (mcp package on PyPI). When an MCP client validates…

We haven't written up this one. Dev.to has the full story — the link below goes straight to it.

Read the original at dev.to →

More in Tech

What I learned putting TabPFN into a small business tool during Global Hack Week

This is a submission for the MLH x DEV Writing Challenge What I Built I built Cashcast , a receivables tool for freelancers, small agencies and bookkeepers.

  • Trained TabPFN on 1,000 recent paid invoices, limited to 39-45 seconds per run on laptop CPU
  • Requesting 49 quantile levels allows model to condition on invoice age for more accurate predictions

Why I pre-register a kill-gate for every experiment

A kill-gate is a threshold written down before an experiment runs: if the result crosses it, the idea dies. The writing down happens first, because after the numbers arrive, every threshold becomes…

  • Kill-gates set thresholds before experiments to prevent bias.
  • Model abandoned when recall for English names fell below 0.90.
  • Ensemble performed better for surnames, achieving 0.970 recall.

More from Wednesday 28 October →