Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | High Risk 7.5 | 5 hours ago | 4 hours ago |
|
|
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability | High Risk 8.0 | 9 months ago | 26 days ago |
|
|
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse | High Risk 7.1 | 8 months ago | 26 days ago |
|
|
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default | High Risk 8.0 | 10 months ago | 26 days ago |
Page 1