@modelcontextprotocol server-legacy vulnerabilities (CVE)

CVE records published for @modelcontextprotocol server-legacy, newest first. Follow to get an email when a new one appears.

1 results

6.8Medium

CVE-2026-111771 6 days ago

Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

modelcontextprotocol typescript-sdk; @modelcontextprotocol sdk; @modelcontextprotocol server; @modelcontextprotocol express

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2…