Skip to content
Threat Feed
Subscribe

Product

@Modelcontextprotocol/Node (2.0.0)

1 brief RSS
high advisory

Model Context Protocol TypeScript SDK: Denial-of-service via unbounded JSON-RPC payloads

The Model Context Protocol (MCP) TypeScript SDK is vulnerable to remote denial-of-service due to a lack of request body size and JSON-RPC batch length limits, allowing unauthenticated attackers to exhaust server resources.

@modelcontextprotocol/sdk +3 denial-of-service mcp nodejs typescript
1t