1 matches found
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Impact A ReDoS vulnerability in the UriTemplate class allows attackers to cause denial of service. The partToRegExp function generates a regex pattern with nested quantifiers ^/+?:,^/+ for exploded template variables e.g., /id, ?tags, causing catastrophic backtracking on malicious input. Who is...
8.7CVSS6.6AI score0.00407EPSS
SaveExploits1References8Affected Software1
20