1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +728 more potentially affected by CVE-2026-111769 via @modelcontextprotocol/client (>=2.0.0, <=2.2.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-111769 Source advisory: MEND:CVE-2026-111769...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +728 more potentially affected by CVE-2026-111769 via @modelcontextprotocol/client (>=2.0.0, <=2.2.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-111769 Source advisory: GHSA-6PRH-2H8M-C8CW...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +728 more potentially affected by CVE-2026-111769 via @modelcontextprotocol/client (>=2.0.0, <=2.2.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-111769 Source advisory: OSV:GHSA-6PRH-2H8M-C8CW...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +728 more potentially affected by CVE-2026-111769 via @modelcontextprotocol/client (>=2.0.0, <=2.2.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-111769 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLCLIENT-21369531...

MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

Summary In affected versions, the SDK's HTTP client transports and OAuth requests followed redirects to any origin. If an MCP server or authorization server redirected a request to another origin, that origin received custom request headers such as an X-API-Key set in requestInit.headers and the...

Open Redirect

Overview @modelcontextprotocol/client is a Model Context Protocol implementation for TypeScript - Client package Affected versions of this package are vulnerable to Open Redirect via unconstrained redirect-following in the HTTP fetch layer used by auth.ts, sse.ts, and streamableHttp.ts. When the...

PT-2026-120302

Summary In affected versions, the SDK's HTTP client transports and OAuth requests followed redirects to any origin. If an MCP server or authorization server redirected a request to another origin, that origin received custom request headers such as an X-API-Key set in requestInit.headers and the...

PT-2026-120342

Summary In affected versions, the SDK's HTTP client transports and OAuth requests followed redirects to any origin. If an MCP server or authorization server redirected a request to another origin, that origin received custom request headers such as an X-API-Key set in requestInit.headers and the...

CVE-2026-104850 MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: MEND:CVE-2026-104850...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: GHSA-6QXP-VCCF-F47H...

Insufficiently Protected Credentials

Overview @modelcontextprotocol/client is a Model Context Protocol implementation for TypeScript - Client package Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchToken and discardIfIssuerMismatch functions in the OAuth client authentication flo...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: OSV:GHSA-6QXP-VCCF-F47H...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLCLIENT-20579842...

PT-2026-106775

Name of the Vulnerable Software and Affected Versions @modelcontextprotocol/sdk versions 1.12.0 through 1.30.1 @modelcontextprotocol/client versions 2.0.0 through 2.1.0 Description The SDK's OAuth client support allows an MCP server to determine which authorization server receives the client's...