Anand Hegde 6d5a4e8c6a feat(mcp): support MCP Python SDK 2.x (#3643) ...

MCP Python SDK 2 renamed FastMCP to MCPServer (mcp.server.fastmcp is
gone) and moved transport_security from the constructor to sse_app().
Import MCPServer when available and fall back to FastMCP on 1.x, passing
transport_security where each version expects it.

Allow mcp < 3 in the mcp extra. 1.x stays supported because semgrep (dev
group) pins mcp==1.29.0: a v2-only pin makes uv resolve semgrep down to
1.79.0.

tests/test_mcp.py now passes plain strings to read_resource() and reads
uriTemplate through model_dump(by_alias=True), so it runs on both SDKs.

2026-09-14 12:10:09 +05:30

..

conf

REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

2026-07-04 17:26:38 +02:00

conftest.py

Improve unit test error for WebUI

2026-08-07 10:54:14 +02:00

HOW_TO_TEST_MCP.md

Correct issue on TU and upgrade lib dep

2026-08-01 10:53:33 +02:00

test_actions_sanitize.py

Argument Injection in On-Alert Action Commands via Unescaped Quote Characters in secure.py's Command Tokenizer - GHSA-56xw-p9qm-r437

2026-09-05 10:02:01 +02:00

test_amp_secure_popen.py

Arbitrary file write and command execution via redirection and chaining operators in AMP command configuration - GHSA-3vwc-qwhc-3mj7 - CVE-id-tbd

2026-06-06 08:24:14 +02:00

test_api_secure.py

as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config - Correct CVE-2026-68520

2026-08-01 10:19:50 +02:00

test_api.py

chore: improve glances maintenance path

2026-06-06 06:46:24 +00:00

test_browser_restful.py

Lint the code

2026-03-24 08:18:04 +00:00

test_browser_tui.py

Central Browser Autodiscovery Leaks Reusable Credentials to Zeroconf-Spoofed Servers - Correct CVE-2026-32634

2026-03-14 09:33:37 +01:00

test_clickhouse_sanitize.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_connections_states.py

Remember that a connections probe was disabled

2026-09-12 11:36:06 +07:00

test_core.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_cpu_percent.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_duckdb_sanitize.py

SQL Injection in DuckDB Export via Unparameterized DDL Statements - Correct CVE-2026-32611

2026-03-14 10:33:24 +01:00

test_export_clickhouse.sh

Add export to ClickHouse #3320

2026-03-22 10:15:17 +01:00

test_export_csv.sh

Upgrade export test with InfluxDB 1.12

2025-10-18 09:25:39 +02:00

test_export_duckdb.sh

SQL Injection in DuckDB Export via Unparameterized DDL Statements - Correct CVE-2026-32611

2026-03-14 10:33:24 +01:00

test_export_influxdb_v1.sh

What a sexy pre-commit config file !

2025-11-22 18:48:13 +01:00

test_export_influxdb_v3.sh

Lint the code

2025-12-26 18:47:01 +01:00

test_export_json.sh

Upgrade export test with InfluxDB 1.12

2025-10-18 09:25:39 +02:00

test_export_nats.sh

Add system test for NATS exporter

2026-01-03 14:21:26 +01:00

test_export_prometheus.sh

Lint the code

2025-12-26 18:47:01 +01:00

test_export_timescaledb_list.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_export_timescaledb.sh

First version ok. Log message should be removed. Code should be tested.

2025-12-30 19:04:07 +01:00

test_folder_list_refresh.py

fix(folders): honour folder_N_refresh instead of walking every cycle

2026-08-24 17:45:05 +07:00

test_glances_curses.py

Let --disable-separator and --disable-bg override glances.conf

2026-09-11 12:14:21 +07:00

test_glances_stats.py

Fix : Codacy

2026-05-21 03:06:41 +00:00

test_globals.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_hide_zero_row_visibility.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_hide_zero_threshold.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_json_serializer.py

Format and lint

2026-02-26 21:55:37 +01:00

test_lazy_views.py

Keep the deferral inside processlist instead of the base class

2026-08-07 16:06:39 +03:00

test_main.py

test(fs): cover free-space config in web mode

2026-08-16 23:10:45 +08:00

test_mcp.py

feat(mcp): support MCP Python SDK 2.x (#3643)

2026-09-14 12:10:09 +05:30

test_memoryleak.py

Disable Renovate for Lock file

2024-12-30 11:57:11 +01:00

test_network_hide_threshold.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_outdated.py

test(outdated): json round-trip and graceful migration from legacy pickle cache

2026-05-23 11:52:53 +02:00

test_perf.py

Update requirements file and add some tests

2025-11-04 21:41:15 +01:00

test_plugin_containers_views.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_containers.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_cpu.py

test: Fix linting issues and trailing whitespace

2026-02-07 00:55:14 +05:30

test_plugin_diskio.py

fix(diskio): alert on the bitrate, and decorate the field the WebUI reads

2026-08-25 19:18:18 +07:00

test_plugin_docker.py

Add unit test to containers/docker plugin

2026-05-31 17:34:25 +02:00

test_plugin_fs.py

fix: compare stats to the init value, not to the bound method

2026-08-15 11:09:13 +00:00

test_plugin_gpu.py

VideoCore (v3d) memory shows ~93% on Raspberry Pi 5 with gpu_mem=4M — misleading denominator from drm-total-memory #3611

2026-07-14 09:59:20 +02:00

test_plugin_init_value.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_load.py

test: Fix linting issues and trailing whitespace

2026-02-07 00:55:14 +05:30

test_plugin_lxd.py

feat: add cpu limit to docker, podman and lxd containers

2026-05-15 17:32:25 +03:00

test_plugin_mem.py

Improve docs and also add min/max/mean for CPU and load

2026-03-07 10:09:24 +01:00

test_plugin_memswap.py

test: Fix linting issues and trailing whitespace

2026-02-07 00:55:14 +05:30

test_plugin_model.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_network.py

fix(network): a rate of 0 in one direction must not mute the other

2026-08-27 10:31:01 +07:00

test_plugin_npu.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_percpu.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_ports.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_processcount.py

Fix: guard cursor navigation in client/server mode (see #3221)

2026-08-04 21:13:20 -04:00

test_plugin_quicklook.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_plugin_sensors.py

fix(sensors): alert on a reading of 0 instead of skipping it

2026-08-26 14:42:35 +07:00

test_plugin_smart.py

TypeError: string indices must be integers, not 'str' in smart plugin during _add_device_stats #3704

2026-09-05 10:46:03 +02:00

test_plugin_virsh_injection.py

Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py - CVE-2026-46606

2026-05-23 12:27:19 +02:00

test_plugin_wifi.py

SQL Injection leading to Data Exfiltration via OOB (Out-of-Band) in Glances ClickHouse Export Module - GHSA-2hvx-g9v6-w29h

2026-09-12 15:30:08 +02:00

test_processes_cache.py

perf: make remove_non_running_procs O(n) instead of O(n^2)

2026-08-05 13:37:30 +03:00

test_program_aggregation.py

Invalidate on sort instead of changing sort_stats

2026-08-07 16:35:36 +03:00

test_program_io_counters.py

style: move the long explanations out of docstrings and into comments

2026-08-26 19:15:40 +07:00

test_programs_aggregation.py

fix: keep zero-valued fields when aggregating processes into programs

2026-08-05 16:44:15 +03:00

test_rate_on_list.py

fix(rate): initialise a stat that is new since the previous sample

2026-09-07 15:13:36 +07:00

test_restful.py

REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

2026-07-04 17:26:38 +02:00

test_sort_missing_values.py

fix(sort): read a missing sort value as zero instead of discarding the sort

2026-08-26 23:38:44 +07:00

test_stdout_csv.py

Lint the code

2026-07-18 09:29:06 +02:00

test_vms_decorations.py

style(vms): wrap two test lines over the 120-column ruff limit

2026-09-08 14:36:17 +07:00

test_web_list_ssl_verify.py

Read web_x_ssl_verify as a boolean, not as a CA bundle path

2026-09-12 11:31:29 +07:00

test_webui_template_response.py

Prepare release 4.5.3

2026-03-29 16:41:48 +02:00

test_webui.py

Merge branch 'develop' into makefile-new

2026-02-17 23:46:22 +05:30

test_xmlrpc.py

XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard - CVE-2026-46608

2026-05-23 11:40:20 +02:00