mcp-server vulnerabilities

2 known vulnerabilities in mcp-server from Tsparticles. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  tsparticles: Uncaught Exception

  CVE-2026-76892Nov 4, 2026Tsparticles

  tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server calls JSON.parse outside a request-local error boundary in the POST /mcp handler in integrations/mcp-server/src/i

• 7.5 High severity

  tsparticles: Uncontrolled Resource Consumption

  CVE-2026-63655Nov 4, 2026Tsparticles

  tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request-