Skip to content
OpenAdvisories

Package · npm

@tsparticles/mcp-server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.7
    CVE-2026-76892

    tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

    tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server calls JSON.parse outside a request-local error boundary in the POST /mcp handler in integrations/mcp-server/src/…

    tsparticles tsparticles mcp-server @tsparticles/mcp-server npm
  • Medium 6.9
    CVE-2026-76893

    tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients

    tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.2, the HTTP mode of @tsparticles/mcp-server reuses one stateful StreamableHTTPServerTransport for every client. An unauthenticated client that sends the fir…

    tsparticles tsparticles mcp-server @tsparticles/mcp-server npm
  • High 7.5
    CVE-2026-63655

    tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

    tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request…

    tsparticles tsparticles mcp-server @tsparticles/mcp-server npm