Vulnerabilidades de lfprojects mcp typescript sdk (CVE)

Registros CVE publicados para lfprojects mcp typescript sdk, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
8.7Alta
CVE-2026-0621

MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS

Anthropic MCP TypeScript SDK

Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regular expression use…