Product by Modelcontextprotocol
Typescript-sdk
4 known vulnerabilities in Typescript-sdk (Modelcontextprotocol), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-111767 | MCP TypeScript SDK: Experimental tasks were not tied to the session that created them | 8.6 | |
| High | CVE-2026-104850 | Modelcontextprotocol Typescript-sdk: Insufficient Verification of Data Authenticity | 7.5 | |
| High | CVE-2025-66414 | Modelcontextprotocol Typescript-sdk: Initialization of a Resource with an Insecure Default | 8.1 | |
| High | CVE-2026-25536 | @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse | 7.1 |