Skip to content
OpenAdvisories

Product · Anthropic

MCP TypeScript SDK

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-0621

    MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS

    Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regular expression use…

    Anthropic MCP TypeScript SDK langfuse-3-worker langfuse-3 Wolfi npm