Skip to content
OpenAdvisories

Package · npm

@modelcontextprotocol/express

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.8
    CVE-2026-111771

    Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

    The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2…

    modelcontextprotocol typescript-sdk server sdk npm