@modelcontextprotocol client vulnerabilities (CVE)

CVE records published for @modelcontextprotocol client, newest first. Follow to get an email when a new one appears.

1 results

6.5Medium

CVE-2026-111769 8 days ago

Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

modelcontextprotocol typescript-sdk; @modelcontextprotocol sdk; @modelcontextprotocol client

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTTP client transports …