Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/01/05 9:30 p.m.17 views

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

Impact A ReDoS vulnerability in the UriTemplate class allows attackers to cause denial of service. The partToRegExp function generates a regex pattern with nested quantifiers ^/+?:,^/+ for exploded template variables e.g., /id, ?tags, causing catastrophic backtracking on malicious input. Who is...

8.7CVSS6.6AI score0.00407EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder