Product
The @tsparticles/mcp-server HTTP handler fails to restrict the size of incoming request bodies, allowing an unauthenticated attacker to cause OOM-driven process termination via a large POST request.