@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +32 more potentially affected by CVE-2026-105804 via payload (>=3.0.1, <=3.89.0)

payload NPM version =3.0.1, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.25, =1.0.1-beta.0, =0.21.0, =0.14.0, =0.21.0, =0.21.0, =1.0.0, =0.1.0, =3.1.0-types, =3.1.0 - @otherdev-software/canvas 1.0.0 and more Source cves: CVE-2026-105804 Source advisory: SNYK:JS-PAYLOAD-20571528...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105804 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105804 Source advisory: OSV:GHSA-Q6MQ-CH85-C8MM...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105804 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105804 Source advisory: SNYK:JS-PAYLOAD-20571528...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105804 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105804 Source advisory: GHSA-Q6MQ-CH85-C8MM...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +35 more potentially affected by CVE-2026-105805 via payload (>=3.0.0-alpha.49, <=3.87.1)

payload NPM version =3.0.0-alpha.49, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.4, =1.0.1-beta.0, =0.14.0, =1.0.0, =0.1.0, =1.0.0, =3.1.0-types, =3.1.0 - @otherdev-software/canvas 1.0.0 - @payloadcms/figma 0.0.1-alpha.0 and more Source cves: CVE-2026-105805 Source advisory: GHSA-9G87-32V6-3C2R...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.26), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105805 via payload (>=4.0.0-canary.0, <=4.0.0-canary.26)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105805 Source advisory: OSV:GHSA-9G87-32V6-3C2R...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.26), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105805 via payload (>=4.0.0-canary.0, <=4.0.0-canary.26)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105805 Source advisory: SNYK:JS-PAYLOAD-20571754...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.26), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105805 via payload (>=4.0.0-canary.0, <=4.0.0-canary.26)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105805 Source advisory: GHSA-9G87-32V6-3C2R...

MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received the client's OAuth credentials. Credentials were not tied to the authorization server they belong to. A malicious or compromised MCP server could name its own authorization server...

Insufficiently Protected Credentials

Overview @modelcontextprotocol/sdk is a Model Context Protocol implementation for TypeScript Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchToken and discardIfIssuerMismatch functions in the OAuth client authentication flow, where the SEP-235...

GHSA-6QXP-VCCF-F47H MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received the client's OAuth credentials. Credentials were not tied to the authorization server they belong to. A malicious or compromised MCP server could name its own authorization server...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5685 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.8, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-20579853...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5685 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.8, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: OSV:GHSA-6QXP-VCCF-F47H...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5685 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.8, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: GHSA-6QXP-VCCF-F47H...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.26), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105805 via payload (>=4.0.0-canary.0, <=4.0.0-canary.26)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105805 Source advisory: MEND:CVE-2026-105805...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105804 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105804 Source advisory: MEND:CVE-2026-105804...

Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to IBM Java SDK (CVE-2026-61308, CVE-2026-70907 & CVE-2026-60589)

Summary IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to IBM Java SDK. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. While the vulnerabilit...

Security Bulletin: Multiple vulnerabilities in IBM SDK, Java technology affect IBM Tivoli Composite Application Manager for Transactions (Response Time)

Summary IBM SDK, Java Technology Edition is used by IBM Tivoli Composite Application Manager for Transactions Response Time. Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

PT-2026-106775

Name of the Vulnerable Software and Affected Versions @modelcontextprotocol/sdk versions 1.12.0 through 1.30.1 @modelcontextprotocol/client versions 2.0.0 through 2.1.0 Description The SDK's OAuth client support allows an MCP server to determine which authorization server receives the client's...

CVE-2026-104850: Insufficient Verification of Data Authenticity

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...