@modelcontextprotocol/sdk vulnerabilities (Root)
7 vulnerabilities.
-
@modelcontextprotocol/sdkRoot MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length 7.5 High -
@modelcontextprotocol/sdkRoot MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation 7.5 High -
@modelcontextprotocol/sdkRoot MCP TypeScript SDK: Experimental tasks were not tied to the session that created them 8.6 High -
@modelcontextprotocol/sdkRoot MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server 7.5 High -
@modelcontextprotocol/sdkRoot AIKIDO-2025-10459 in @rootio/modelcontextprotocol__sdk - Patched by Root No score -
@modelcontextprotocol/sdkRoot MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS 8.7 High -
@modelcontextprotocol/sdkRoot DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost 7.6 High