@modelcontextprotocol server

• CVE-2026-111770 High 7.7 Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another 0.4%
• CVE-2026-111768 High 7.5 Model Context Protocol TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation 0.6%
• CVE-2026-111771 Medium 6.8 Model Context Protocol TypeScript SDK: Server bearer authentication accepted tokens issued for another service 0.5%