@modelcontextprotocol/express vulnerabilities (npm)

1 vulnerability.

• @modelcontextprotocol/express npm Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service CVE-2026-111771 Fix available 6.8 MediumOctober 20, 2026