sdk vulnerabilities

1 known vulnerability in sdk from Modelcontextprotocol. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  typescript-sdk: Allocation of Resources Without Limits or Throttling

  CVE-2026-111768Nov 5, 2026Modelcontextprotocol

  The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did not