Three weeks of watching MCP advisories appear and disappear
Three weeks ago I published a single-night scan of the top 500 MCP servers. Then I left the scanner running: every night it re-ranks the official MCP Registry by last-week downloads, re-checks OSV, and diffs against the night before. This is what changed between October 20 and November 9, 2026 — and why an advisory "appearing" or "disappearing" on a tracker is usually not what it sounds like. The…
Over three weeks, the MCP advisory landscape experienced significant changes. Initially, 222 OSV records were associated with 500 top servers, with 7 servers having advisories and 4 servers still affected by the current version. The median score was 93, while the mean score was 92.4. However, by November 9, only 4 OSV records remained out of the 222, and only 1 server was affected. The key reason for these changes was the shifting set of servers being tracked.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
