--- title: MySQL MCP Server v1.8.0 is out | daily.dev description: MySQL MCP Server v1.8.0 fixes 37 vulnerabilities reachable by the server, found once the vulnerability scan ran again after it had been silently failing. Most... canonical: https://daily.dev/posts/mysql-mcp-server-v1-8-0-is-out-mhac5poxv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: MySQL MCP Server v1.8.0 is out | daily.dev og:description: MySQL MCP Server v1.8.0 fixes 37 vulnerabilities reachable by the server, found once the vulnerability scan ran again after it had been silently failing. Most... og:url: https://daily.dev/posts/mysql-mcp-server-v1-8-0-is-out-mhac5poxv og:image: https://api.daily.dev/og/posts/mHAc5PoXV.png og:image:alt: MySQL MCP Server v1.8.0 is out og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # MySQL MCP Server v1.8.0 is out **[Planet MySQL](https://daily.dev/sources/planet-mysql)** · 4 min read · 1 upvotes · 0 comments ## Summary MySQL MCP Server v1.8.0 fixes 37 vulnerabilities reachable by the server, found once the vulnerability scan ran again after it had been silently failing. Most were in the Go 1.24 standard library, the rest in SSH and MCP SDK dependencies. The fix bumps Go 1.24 to 1.26, golang.org/x/crypto from v0.43.0 to v0.58.0, and the MCP Go SDK from v1.2.0 to v1.8.0. CI now tests against MySQL 8.0, 8.4, 9.7 and 26.7 plus MariaDB 11.4 and 12.3, and govulncheck now blocks merges and releases. Building from source now requires Go 1.26 or later; Homebrew, Docker and release binaries are unaffected. Release candidates no longer reach the Homebrew tap. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What changed in MySQL MCP Server v1.8.0? Version 1.8.0 fixes 37 vulnerabilities reachable by the server, found after the vulnerability scan and linter had been silently failing with informational-only settings. The release bumps Go from 1.24 to 1.26, golang.org/x/crypto from v0.43.0 to v0.58.0, and the MCP Go SDK from v1.2.0 to v1.8.0. govulncheck now blocks merges and releases going forward. _Teams running MCP servers against production databases can track dependency patches like these via daily.dev._ ### Do I need a specific Go version to build mysql-mcp-server from source? Yes, building mysql-mcp-server from source requires Go 1.26 or later as of version 1.8.0, a breaking change tied to the Go standard library update that fixed several vulnerabilities. Homebrew installs, Docker images, and prebuilt release binaries are not affected by this requirement. _Developers tracking breaking toolchain requirements can follow MCP server updates on daily.dev._ ### Which MySQL and MariaDB versions are tested against the MySQL MCP server? The integration suite runs against MySQL 8.0, 8.4, 9.7 and 26.7, plus MariaDB 11.4 and 12.3. MySQL 26.7 is the first Innovation release under Oracle's new calendar versioning. MySQL 8.0 remains in the matrix even though it reached end of life in April, since many users have not yet moved to 8.4. _Those choosing which MySQL version to standardize on can follow compatibility coverage on daily.dev._ ## Similar posts on daily.dev - [The GitHub MCP Server adds support for tool-specific configuration, and more](https://daily.dev/posts/the-github-mcp-server-adds-support-for-tool-specific-configuration-and-more-lokxpjsne) · GitHub Changelog · 0 upvotes · 0 comments - [MCP is now stateless: what the 2026-07-28 update changes](https://daily.dev/posts/mcp-is-now-stateless-what-the-2026-07-28-update-changes-hc2vhg5ll) · Flavio Copes · 9 upvotes · 0 comments - [Bug hunter tracks down three massive MCP flaws and one vendor won't fix theirs](https://daily.dev/posts/bug-hunter-tracks-down-three-massive-mcp-flaws-and-one-vendor-won-t-fix-theirs-grn4hyt1t) · The Register · 1 upvotes · 0 comments --- Tags: [#infrastructure](https://daily.dev/tags/infrastructure), [#golang](https://daily.dev/tags/golang), [#mcp](https://daily.dev/tags/mcp), [#mysql](https://daily.dev/tags/mysql) [View this post on daily.dev](https://daily.dev/posts/mysql-mcp-server-v1-8-0-is-out-mhac5poxv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"MySQL MCP Server v1.8.0 is out","url":"https://daily.dev/posts/mysql-mcp-server-v1-8-0-is-out-mhac5poxv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/mysql-mcp-server-v1-8-0-is-out-mhac5poxv"},"datePublished":"2026-10-26T12:08:51.927Z","dateModified":"2026-10-26T12:10:10.053Z","description":"MySQL MCP Server v1.8.0 fixes 37 vulnerabilities reachable by the server, found once the vulnerability scan ran again after it had been silently failing. Most...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c2e400ea24a77597097b26d6e0a02f74?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/c2e400ea24a77597097b26d6e0a02f74?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Planet MySQL","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Planet MySQL","logo":"https://media.daily.dev/image/upload/s--UKAtmXTq--/f_auto,q_auto/v1780213421/logos/planet-mysql?_a=BAMAMiWQ0","url":"https://daily.dev/sources/planet-mysql"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/mysql-mcp-server-v1-8-0-is-out-mhac5poxv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"infrastructure,golang,mcp,mysql","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Planet MySQL","item":"https://daily.dev/sources/planet-mysql"},{"@type":"ListItem","position":3,"name":"MySQL MCP Server v1.8.0 is out"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/mysql-mcp-server-v1-8-0-is-out-mhac5poxv#faq","mainEntity":[{"@type":"Question","name":"What changed in MySQL MCP Server v1.8.0?","acceptedAnswer":{"@type":"Answer","text":"Version 1.8.0 fixes 37 vulnerabilities reachable by the server, found after the vulnerability scan and linter had been silently failing with informational-only settings. The release bumps Go from 1.24 to 1.26, golang.org/x/crypto from v0.43.0 to v0.58.0, and the MCP Go SDK from v1.2.0 to v1.8.0. govulncheck now blocks merges and releases going forward. Teams running MCP servers against production databases can track dependency patches like these via daily.dev."}},{"@type":"Question","name":"Do I need a specific Go version to build mysql-mcp-server from source?","acceptedAnswer":{"@type":"Answer","text":"Yes, building mysql-mcp-server from source requires Go 1.26 or later as of version 1.8.0, a breaking change tied to the Go standard library update that fixed several vulnerabilities. Homebrew installs, Docker images, and prebuilt release binaries are not affected by this requirement. Developers tracking breaking toolchain requirements can follow MCP server updates on daily.dev."}},{"@type":"Question","name":"Which MySQL and MariaDB versions are tested against the MySQL MCP server?","acceptedAnswer":{"@type":"Answer","text":"The integration suite runs against MySQL 8.0, 8.4, 9.7 and 26.7, plus MariaDB 11.4 and 12.3. MySQL 26.7 is the first Innovation release under Oracle's new calendar versioning. MySQL 8.0 remains in the matrix even though it reached end of life in April, since many users have not yet moved to 8.4. Those choosing which MySQL version to standardize on can follow compatibility coverage on daily.dev."}}]} ```