CVE-2025-66414 vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli, opensearch-dashboards, librechat, langfuse, opensearch-dashboards-fips...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2570 more potentially affected by CVE-2025-66414 via @modelcontextprotocol/sdk (>=1.0.0, <=1.23.1)

@modelcontextprotocol/sdk NPM version =1.0.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.0.19 and more Source cves: CVE-2025-66414 Source advisory: OSV:GHSA-W48Q-CV73-MX4W...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2570 more potentially affected by CVE-2025-66414 via @modelcontextprotocol/sdk (>=1.0.0, <=1.23.1)

@modelcontextprotocol/sdk NPM version =1.0.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.2, =1.0.0, =1.0.19 and more Source cves: CVE-2025-66414 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-14171914...