CLSA-2026-1791839313 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.26.0-tuxcare.1...

CLSA-2026-1791835900 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.29.0-tuxcare.1...

PT-2026-121713

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.26.0-tuxcare.1...

PT-2026-121709

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.29.0-tuxcare.1...

CLSA-2026-1791679180 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.30.0-tuxcare.1...

PT-2026-120284

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.30.0-tuxcare.1...

CLSA-2026-1791626582 TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.30.1-tuxcare.1...

PT-2026-118544

TuxCare rebuilt @modelcontextprotocol/sdk to address 1 CVE. Fixed in 1.30.1-tuxcare.1...

CVE-2026-104850 MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server

MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAut...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5986 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.0, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: MEND:CVE-2026-104850...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: MEND:CVE-2026-104850...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5986 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.0, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: OSV:GHSA-6QXP-VCCF-F47H...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5986 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.0, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: GHSA-6QXP-VCCF-F47H...

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +5986 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/sdk (>=1.12.0, <=1.30.1)

@modelcontextprotocol/sdk NPM version =1.12.0, =0.3.3, =1.0.0, =0.2.0, =1.14.1, =1.0.0, =0.1.3, =0.1.0, =0.1.0, =0.2.0, =0.38.0, =1.0.0, =8.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-20579853...

1st-pi (>=0.1.0, <=0.1.1), @0pvalencia/academic-linter-mcp (>=0.1.0, <=0.1.1) +1567 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/core (>=2.0.0, <=2.1.0)

@modelcontextprotocol/core NPM version =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.38.0, =1.3.3, =1.1.0, =2026.925.1, =0.2.0, =0.2.6 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLCORE-20579858...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: OSV:GHSA-6QXP-VCCF-F47H...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: GHSA-6QXP-VCCF-F47H...

1st-pi (>=0.1.0, <=0.1.1), @1mcp/agent (>=0.38.0, <=0.39.0-beta.3) +602 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/client (>=2.0.0, <=2.1.0)

@modelcontextprotocol/client NPM version =2.0.0, =0.1.0, =0.38.0, =0.2.0, =0.1.0, =0.4.3, =0.4.1, =0.4.1, =0.1.7-rc.0, =13.0.0-rc.4, =0.3.0, =0.1.0, =0.0.5, =0.7.0, =0.8.0 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLCLIENT-20579842...

@1mcp/agent (>=0.38.0, <=0.39.0-beta.3), @3ngram/server (>=1.1.0, <=1.8.5) +71 more potentially affected by CVE-2026-104850 via @modelcontextprotocol/server-legacy (>=2.0.0, <=2.1.0)

@modelcontextprotocol/server-legacy NPM version =2.0.0, =0.38.0, =1.1.0, =0.3.8, =0.5.0, =2.0.0, =0.59.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =3.1.0 and more Source cves: CVE-2026-104850 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSERVERLEGACY-20579867...

Insufficiently Protected Credentials

Overview @modelcontextprotocol/core is a Model Context Protocol for TypeScript — public Zod schemas spec + OAuth/OpenID Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the fetchToken and discardIfIssuerMismatch functions in the OAuth client...