Known vulnerabilities in @modelcontextprotocol client
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-111769 | Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies | 6.5 Medium | Nov 5, 2026 |