Insufficiently Protected Credentials

Overview @modelcontextprotocol/core is a Model Context Protocol for TypeScript — public Zod schemas spec + OAuth/OpenID Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchToken and discardIfIssuerMismatch functions in the OAuth client...