@modelcontextprotocol server güvenlik açıkları (CVE)

@modelcontextprotocol server için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç

7.7Yüksek

CVE-2026-111770 6 gün önce

Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another

modelcontextprotocol typescript-sdk; @modelcontextprotocol server

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 2.0.0 until 2.3.0 in @modelcontextprotocol/server, applications that shared one stateless HTTP transport or one McpServer or Se…

7.5Yüksek

CVE-2026-111768 6 gün önce

Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation

modelcontextprotocol typescript-sdk; @modelcontextprotocol server; @modelcontextprotocol sdk

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did no…

6.8Orta

CVE-2026-111771 6 gün önce

Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

modelcontextprotocol typescript-sdk; @modelcontextprotocol sdk; @modelcontextprotocol server; @modelcontextprotocol express

The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2…