This release addresses security vulnerabilities disclosed in the .NET August 2026 servicing update, including CVE-2026-62900 in the .NET SDK's SourceLink components. Because the MCP docs package is published self-contained, it embeds the .NET runtime, so republishing with the patched SDK is also required to pick up this month's runtime fixes (e.g. CVE-2026-62901).
What's Changed
- The .NET SDK version has been bumped from
10.0.302to10.0.303(bundles runtime10.0.11).