server vulnerabilities

2 known vulnerabilities in server from Modelcontextprotocol. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  typescript-sdk: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-111770Nov 5, 2026Modelcontextprotocol

  The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 2.0.0 until 2.3.0 in @modelcontextprotocol/server, applications that shared one stateless HTTP transport or one McpServer or Ser

• 7.5 High severity

  typescript-sdk: Allocation of Resources Without Limits or Throttling

  CVE-2026-111768Nov 5, 2026Modelcontextprotocol

  The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/server, HTTP servers did not