CVE-2026-76892

The tsParticles TypeScript library (specifically the @tsparticles/mcp-server component) is vulnerable to a Denial of Service (DoS) condition in versions prior to 4.3.1 . The root cause is that the POST /mcp handler calls JSON.parse outside of a request-local error boundary in integrations/mcp-ser...