Official MCP servers v2.1.0 patch eight vulnerabilities across three packages

modelcontextprotocol/servers v2.1.0 fixes eight vulnerabilities and requires upgrades to @modelcontextprotocol/server-filesystem 2.0.1, server-everything 2.0.1 and mcp-server-fetch 2026.10.24. The filesystem fixes close a symlink-swap race where a parent directory replaced between the access check and the write could redirect write_file, edit_file, create_directory or a move_file destination outside the allowed roots, only partly fixed on Windows, plus an exact-path check that no longer strips trailing quote or whitespace and a case-variant symlink regression from 2026.8.31. server-everything now checks the Origin header on its HTTP and SSE transports and drops 'Access-Control-Allow-Origin: *', so a visited web page can no longer call tools such as get-env.