Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/04 8:04 p.m.9 views

GHSA-345P-7CG4-V4C7 @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

Summary Cross-client data leak via two distinct issues: 1 reusing a single StreamableHTTPServerTransport across multiple client requests, and 2 reusing a single McpServer/Server instance across multiple transports. Both are most common in stateless deployments. Impact This advisory covers two...

7.1CVSS5.6AI score0.00267EPSS
SaveExploits0References5
Rows per page
Query Builder