| CVE-2026-111770 |
Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another
|
7.7
Élevée
|
5 nov. 2026 |
| CVE-2026-111768 |
Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
|
7.5
Élevée
|
5 nov. 2026 |
| CVE-2026-111769 |
Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
|
6.5
Moyenne
|
5 nov. 2026 |
| CVE-2026-111771 |
Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service
|
6.8
Moyenne
|
5 nov. 2026 |
| CVE-2026-111767 |
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients
|
8.6
Élevée
|
20 oct. 2026 |
| CVE-2026-104850 |
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients
|
7.5
Élevée
|
6 oct. 2026 |
| CVE-2026-25536 |
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients
|
7.1
Élevée
|
4 févr. 2026 |
| CVE-2025-66414 |
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients
|
7.6
Élevée
|
2 déc. 2025 |