Tsparticles vulnerabilities
We track 3 vulnerabilities in Tsparticles products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Tsparticles vulnerabilities
- 8.7 High severity
tsparticles: Uncaught Exception
tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server calls JSON.parse outside a request-local error boundary in the POST /mcp handler in integrations/mcp-server/src/i
- 7.5 High severity
tsparticles: Improper Neutralization of Special Elements used in an OS Command
tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAW_RELEASE.md. Co
- 7.5 High severity
tsparticles: Uncontrolled Resource Consumption
tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request-