{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/@modelcontextprotocol/hono-2.0.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["@modelcontextprotocol/sdk (1.10.0-1.30.0)","@modelcontextprotocol/server (2.0.0)","@modelcontextprotocol/node (2.0.0)","@modelcontextprotocol/hono (2.0.0)"],"_cs_severities":["high"],"_cs_tags":["denial-of-service","mcp","nodejs","typescript"],"_cs_type":"advisory","_cs_vendors":["Model Context Protocol"],"content_html":"\u003cp\u003eThe Model Context Protocol (MCP) TypeScript SDK fails to enforce limits on HTTP request body sizes and the number of messages within a JSON-RPC batch. This vulnerability allows an unauthenticated attacker to send excessively large payloads or large batches to an MCP server, leading to memory exhaustion or service unavailability. Deployment configurations utilizing stdio are not affected by this vulnerability.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a denial-of-service condition, potentially crashing the server or preventing legitimate requests from being processed due to resource exhaustion.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate affected packages immediately to the patched versions:\u003c/li\u003e\n\u003cli\u003eFor 1.x environments: Update \u003ccode\u003e@modelcontextprotocol/sdk\u003c/code\u003e to 1.30.1 or later.\u003c/li\u003e\n\u003cli\u003eFor 2.x environments: Update \u003ccode\u003e@modelcontextprotocol/server\u003c/code\u003e to 2.1.0, \u003ccode\u003e@modelcontextprotocol/node\u003c/code\u003e to 2.1.0, and \u003ccode\u003e@modelcontextprotocol/hono\u003c/code\u003e to 2.0.1 or later.\u003c/li\u003e\n\u003cli\u003eIf immediate patching is not possible, implement a request body size limit at the reverse proxy or API gateway level to mitigate payload-based exhaustion.\u003c/li\u003e\n\u003cli\u003eReview MCP server configurations to verify if client trust boundaries allow unauthenticated access to HTTP transport endpoints.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T21:02:18Z","date_published":"2026-10-29T21:02:18Z","id":"https://feed.craftedsignal.io/briefs/2026-10-mcp-typescript-sdk-dos-eb09b16e/","summary":"The Model Context Protocol (MCP) TypeScript SDK is vulnerable to remote denial-of-service due to a lack of request body size and JSON-RPC batch length limits, allowing unauthenticated attackers to exhaust server resources.","title":"Model Context Protocol TypeScript SDK: Denial-of-service via unbounded JSON-RPC payloads","url":"https://feed.craftedsignal.io/briefs/2026-10-mcp-typescript-sdk-dos-eb09b16e/"}],"language":"en","title":"CraftedSignal Threat Feed - @Modelcontextprotocol/Hono (2.0.0)","version":"https://jsonfeed.org/version/1.1"}