Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/08/19 7:17 p.m.•18 views

MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter

Summary The HTTP client transport in mcp/sdk reads a Server-Sent-Events SSE response stream incrementally and appends each 4 KiB chunk to an in-memory buffer $this-sseBuffer .= $chunk; with no upper bound. The buffer is only ever flushed when an SSE event delimiter "\n\n" appears. A remote MCP...

6.9CVSS5.9AI score0.00615EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder