@modelcontextprotocol/sdk vulnerabilities (npm)
9 vulnerabilities.
-
@modelcontextprotocol/sdknpm MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length 7.5 High -
@modelcontextprotocol/sdknpm MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation 7.5 High -
@modelcontextprotocol/sdknpm MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service 6.8 Medium -
@modelcontextprotocol/sdknpm MCP TypeScript SDK: Experimental tasks were not tied to the session that created them 8.6 High -
@modelcontextprotocol/sdknpm MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies 6.5 Medium -
@modelcontextprotocol/sdknpm MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server 7.5 High -
@modelcontextprotocol/sdknpm @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse 7.1 High -
@modelcontextprotocol/sdknpm MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS 8.7 High -
@modelcontextprotocol/sdknpm DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost 7.6 High