MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients.
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (taskStore) did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. This issue has been patched in version 1.32.0.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Node.js, Anthropic
- Product
- Node.js, Claude, AI / LLM tooling
- CVSS
- 8.6
- EPSS
- 0.003 (p28)
- Fix
- available
- Exposure class
- Developer platform, AI infrastructure
Why it ranks 20 (Routine)
- CVSS 8.6 high
- Product class: developer platform, AI infrastructure
- Fix available
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.