Skip to content
OpenAdvisories

Product · modelcontextprotocol

express

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-111771

    Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

    The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2…

    modelcontextprotocol typescript-sdk server sdk npm