modelcontextprotocol Typescript Sdk Vulnerabilities

Modelcontextprotocol Typescript-sdk vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

20 October 2026

Session Management Flaw in MCP TypeScript SDK Affects Multiple Versions
CVE-2026-111767
ModelcontextprotocolTypescript-sdk8.6HIGH

6 October 2026

OAuth Vulnerability in MCP TypeScript SDK Affecting Model Context Protocol Servers
CVE-2026-104850
ModelcontextprotocolTypescript-sdk7.5HIGH

4 February 2026

Cross-Client Data Leak in MCP TypeScript SDK Version 1.10.0 to 1.25.3
CVE-2026-25536
ModelcontextprotocolTypescript-sdk7.1HIGH

2 December 2025

DNS Rebinding Vulnerability in MCP TypeScript SDK
CVE-2025-66414
ModelcontextprotocolTypescript-sdk7.6HIGH