VendorsLF Projectsmcp_typescript_sdkall versions
Vulnerabilities

LF Projects MCP TypeScript SDK

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-0621
MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS
Published 2026-01-05 · Analyzed
8.7EPSS 0.004
CVE-2025-66414
DNS Rebinding Protection Disabled by Default in Model Context Protocol TypeScript SDK for Servers Running on Localhost
Published 2025-12-02 · Analyzed
8.1EPSS 0.005
CVE-2026-25536
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Published 2026-02-04 · Modified
7.1EPSS 0.003