MT
Product
Mcp Typescript Sdk
3
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add Mcp Typescript Sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-66414 | 8.1 | Dec 2 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients Affected: before 1.24.0 |
| CVE-2026-0621 | 7.5 | Jan 5 | MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS Affected: through 1.25.1 |
| CVE-2026-25536 | 7.1 | Feb 4 | @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse Affected: 1.10.0 before 1.26.0 |
Showing 3