With the update 1.101 (“May”) of Visual Studio Code (VS Code), the editor masters the complete Model Context Protocol (MCP) with all specifications: Authorization increases security when using MCP ...
I found OAuth credential exposure flaws in the official MCP Python and TypeScript SDKs. Why patching CVE-2026-115563 and CVE-2026-104850 may not be enough.