CVE-2026-111767

Vendor

Node.js, Anthropic

Product

Node.js, Claude, AI / LLM tooling

CVSS

8.6

EPSS

0.003 (p28)

Exposure class

Developer platform, AI infrastructure

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   CVE NVD 11d ago

   MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients.

   MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a…

   CVSS 8.6 Fix available CVE-2026-111767 Node.js Anthropic