Skip to content

CVE record · 1 source

CVE-2026-104850

CVSS 7.5

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients.

Vendor: Node.js, Anthropic
Product: Node.js, Claude, AI / LLM tooling
CVSS: 7.5
Exposure class: Developer platform, AI infrastructure

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 25d ago

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients.

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client…

CVSS 7.5 CVE-2026-104850 Node.js Anthropic