Lucene search
+L

21 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 8:07 p.m.•9 views

MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another

Summary In affected versions, an MCP server reached over HTTP could deliver one client's responses and notifications to another client. This happened when clients shared one stateless transport, or one McpServer or Server instance. Messages were matched to a connection by JSON-RPC id alone. SDK...

6AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder