Skip to content
OpenAdvisories

Vendor

tsparticles

4 known vulnerabilities.

Products

tsparticles 4 mcp-server 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-76892

    tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

    tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server calls JSON.parse outside a request-local error boundary in the POST /mcp handler in integrations/mcp-server/src/…

    tsparticles tsparticles mcp-server @tsparticles/mcp-server npm
  • High 7.5
    CVE-2026-76826

    tsParticles: Generated release notes can execute shell commands in the stable publish workflow

    tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAW_RELEASE.md. C…

    tsparticles tsparticles
  • High 7.5
    CVE-2026-63655

    tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

    tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request…

    tsparticles tsparticles mcp-server @tsparticles/mcp-server npm