mcp/sdk vulnerabilities (Packagist)

1 vulnerability.

• mcp/sdk Packagist MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service CVE-2026-53965 Fix available 6.9 MediumAugust 19, 2026