sdk

Records4

1. closed7.7
   MCP SDKs CVE-2026-111770: Model Context Protocol TypeScript SDK Multi-Client Message Routing Flaw

   Research · Disclosed · since 5 Nov 2026 · CVE-2026-111770

   AI
2. closed6.8
   MCP SDKs RMCP Rust SDK Leaks Custom Headers on Cross-Origin Redirects

   Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-64684

   AI
3. closed4.8
   Claude Code + SDKs CVE-2026-41686: Claude SDK TypeScript Insecure File Permissions

   Patch now · Disclosed · since 29 Apr 2026 · CVE-2026-41686

   AI
4. closed3.7
   Vercel AI SDK CVE-2025-48985: Vercel AI SDK filetype whitelist bypass vulnerability

   Patch now · Disclosed · since 7 Nov 2025 · CVE-2025-48985

   AI