Modelcontextprotocol / Typescript-Sdk

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-25536	@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse	HIGH	7.1	Feb 4, 2026
CVE-2025-66414	DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost	HIGH	7.6	Dec 2, 2025

Rows per page

Showing 1 to 2 of 2 CVEs