@modelcontextprotocol/server-legacy vulnerabilities (npm)

1 vulnerability.

• @modelcontextprotocol/server-legacy npm Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service CVE-2026-111771 Fix available 6.8 MediumOctober 20, 2026