| CVE-2026-111768 |
Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
|
7.5
High
|
Nov 5, 2026 |
| CVE-2026-111769 |
Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
|
6.5
Medium
|
Nov 5, 2026 |
| CVE-2026-111771 |
Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service
|
6.8
Medium
|
Nov 5, 2026 |