Vulnerabilidades de modelcontextprotocol typescript-sdk (CVE)

Registros CVE publicados para modelcontextprotocol typescript-sdk, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

8 resultados
7.5Alta
CVE-2026-111768

Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

modelcontextprotocol typescript-sdk; @modelcontextprotocol server; @modelcontextprotocol sdk

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did no…

6.5Media
CVE-2026-111769

Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

modelcontextprotocol typescript-sdk; @modelcontextprotocol sdk; @modelcontextprotocol client

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTTP client transports …

6.8Media
CVE-2026-111771

Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

modelcontextprotocol typescript-sdk; @modelcontextprotocol sdk; @modelcontextprotocol server; @modelcontextprotocol express

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2…