@modelcontextprotocol Client vulnerabilities

• @modelcontextprotocol client, sdk, modelcontextprotocol typescript-sdk +2 more Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies CVE-2026-111769 Fix available 6.5 MediumOctober 20, 2026