TY
Product
typescript-sdk
2
CVEs
0
On KEV
8.6
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add typescript-sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-111767 | 8.6 | Oct 20 | MCP TypeScript SDK: Experimental tasks were not tied to the session that created them Affected: >= 1.24.0, < 1.32.0 |
| CVE-2026-104850 | 7.5 | Oct 6 | MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server Affected: >= 1.12.0, < 1.31.0; >= 2.0.0, < 2.2.0 |
Showing 2