Modelcontextprotocol Typescript-Sdk

2 CVEs affecting Modelcontextprotocol Typescript-Sdk. Latest disclosed: 2026-02-04. Critical: 0, High: 2.

Top CVEs affecting Modelcontextprotocol Typescript-Sdk
CVESeverityScorePublishedSummary
CVE-2025-66414High8.12025-12-02MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Prior to 1.24.0, The Model Context Protocol (MCP) TypeScript…
CVE-2026-25536High7.12026-02-04MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3, cross-client response data lea…