NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows

NPM: launch-editor: escapeCmdArgs omits % escaping on Windows vulnerability discovered by ? in WordPress Npm vite versions = 6.4.3...

CVE-2026-111767

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature taskStore did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel ea...

CVE-2026-111767 MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature taskStore did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel ea...

CVE-2026-111767 MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature taskStore did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel ea...

EUVD-2026-105256

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature taskStore did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel ea...

CVE-2026-111767

The MCP TypeScript SDK (@modelcontextprotocol/sdk) versions 1.24.0 through 1.31.0 are vulnerable due to a flaw in the experimental taskStore feature. The root cause is that tasks were not tied to specific sessions, allowing clients sharing a single InMemoryTaskStore to unauthorizedly list, read, ...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 File Upload Vulnerability Analysis Vulnerability Location Vulnerability Location: ht-contactform/admin/Includes/Services/FileManager.php Key Function: tempfileupload 1. Main Vulnerability Point: tempfileupload function Line 63 public function...

GHSA-22JM-H49P-29QW MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

Summary In affected versions, the experimental tasks feature taskStore did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. Experimental tasks are deprecated. The 2026-07-28 specification replaced them with a redesigned...

MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

Summary In affected versions, the experimental tasks feature taskStore did not check which session created a task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. Experimental tasks are deprecated. The 2026-07-28 specification replaced them with a redesigned...

MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

Summary In affected versions, the SDK's HTTP client transports and OAuth requests followed redirects to any origin. If an MCP server or authorization server redirected a request to another origin, that origin received custom request headers such as an X-API-Key set in requestInit.headers and the...

GHSA-6PRH-2H8M-C8CW MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies

Summary In affected versions, the SDK's HTTP client transports and OAuth requests followed redirects to any origin. If an MCP server or authorization server redirected a request to another origin, that origin received custom request headers such as an X-API-Key set in requestInit.headers and the...

CVE-2026-111769

The MCP TypeScript client SDK is vulnerable because its HTTP client transports and OAuth requests follow redirects to any origin, potentially leaking sensitive information. If an MCP server or authorization server redirects a request to a different origin, that origin may receive custom request h...

ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)

Impact Even though it is correctly applied to guests, contributors, etc., viewRole is not applied to the general public. This means that a secured content type like @apostrophecms/user can in theory be accessed. This is greatly mitigated by the fact that there is no automatic public REST API for...

GHSA-XF6W-Q65W-4F2W ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)

Impact Even though it is correctly applied to guests, contributors, etc., viewRole is not applied to the general public. This means that a secured content type like @apostrophecms/user can in theory be accessed. This is greatly mitigated by the fact that there is no automatic public REST API for...

NPM: ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship (viewRole is not applied to the general public)

NPM: ApostropheCMS: The general public can access @apostrophecms/user objects via a relationship viewRole is not applied to the general public vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

GHSA-VWWX-PX9W-CRRC ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

Summary The notification module exposes PATCH and DELETE REST endpoints that perform operations directly on the underlying MongoDB collection without verifying that the requester is authenticated or owns the target notification. As a result, an unauthenticated attacker who obtains a valid...

ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

Summary The notification module exposes PATCH and DELETE REST endpoints that perform operations directly on the underlying MongoDB collection without verifying that the requester is authenticated or owns the target notification. As a result, an unauthenticated attacker who obtains a valid...

NPM: ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

NPM: ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints vulnerability discovered by ? in WordPress Npm apostrophe versions 4.33.0...

GHSA-97WV-P4XX-C7MG ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

Summary The tar-extraction guard added to @apostrophecms/import-export for GHSA-mwxc-m426-3f78 is a literal substring test for ../, and ./.. does not contain that substring. An entry named ./.. therefore passes the guard, path.join normalizes it to the parent of the export directory, and the...

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

Summary The tar-extraction guard added to @apostrophecms/import-export for GHSA-mwxc-m426-3f78 is a literal substring test for ../, and ./.. does not contain that substring. An entry named ./.. therefore passes the guard, path.join normalizes it to the parent of the export directory, and the...