modelcontextprotocol typescript-sdk Schwachstellen (CVE)

Für modelcontextprotocol typescript-sdk veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

8 Ergebnisse
7.5Hoch
CVE-2026-111768

Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

modelcontextprotocol typescript-sdk; @modelcontextprotocol server; @modelcontextprotocol sdk

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did no…

6.5Mittel
CVE-2026-111769

Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

modelcontextprotocol typescript-sdk; @modelcontextprotocol sdk; @modelcontextprotocol client

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTTP client transports …

6.8Mittel
CVE-2026-111771

Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

modelcontextprotocol typescript-sdk; @modelcontextprotocol sdk; @modelcontextprotocol server; @modelcontextprotocol express

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2…