Skip to content
OpenAdvisories

Product · modelcontextprotocol

typescript-sdk

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-111769

    Model Context Protocol TypeScript SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

    The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTTP client transports …

    modelcontextprotocol typescript-sdk sdk client npm
  • Medium 6.8
    CVE-2026-111771

    Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service

    The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, from 2.0.0 until 2.0.2…

    modelcontextprotocol typescript-sdk server sdk npm