CVE-2026-111768

The Model Context Protocol TypeScript SDK is vulnerable to a memory exhaustion issue where a single HTTP request within the default 4 MiB limit can terminate the process due to JavaScript heap exhaustion . The root cause is the lack of enforced limits on the number of array elements and object ke...