@modelcontextprotocol Server-legacy vulnerabilities

• @clerk express, @modelcontextprotocol sdk, server +2 more +4 more Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service CVE-2026-111771 Fix available 6.8 MediumOctober 20, 2026