Skip to content
Modelcontextprotocol Typescript-sdk vulnerabilities
-
@modelcontextprotocol server, modelcontextprotocol typescript-sdk +1 more
Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another
CVE-2026-111770
Public exploitFix available
7.7 High
-
@modelcontextprotocol sdk, server, modelcontextprotocol typescript-sdk +2 more
Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
CVE-2026-111768
Fix available
7.5 High
-
@clerk express, @modelcontextprotocol sdk, server +2 more +4 more
Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service
CVE-2026-111771
Fix available
6.8 Medium
-
modelcontextprotocol typescript-sdk
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
CVE-2026-111767
Fix available
8.6 High
-
@modelcontextprotocol client, sdk, modelcontextprotocol typescript-sdk +2 more
Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
CVE-2026-111769
Fix available
6.5 Medium
-
modelcontextprotocol typescript-sdk
MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server
CVE-2026-104850
Public exploitFix available
7.5 High
-
lfprojects mcp typescript sdk, modelcontextprotocol typescript-sdk, red hat ansible automation platform 2.6 +2 more
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
CVE-2026-25536
Fix available
7.1 High
-
lfprojects mcp typescript sdk, modelcontextprotocol typescript-sdk +1 more
DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost
CVE-2025-66414
Fix available
7.6 High