CVE-2026-0621

The record

A ReDoS vulnerability in the `UriTemplate` class allows attackers to cause denial of service. The `partToRegExp()` function generates a regex pattern with nested quantifiers (`([^/]+(?:,[^/]+)*)`) for exploded template variables (e.g., `{/id*}`, `{?tags*}`), causing catastrophic backtracking on malicious input. **Who is affected:** MCP servers that register resource templates with exploded array patterns and accept requests from untrusted clients. **Attack result:** An attacker sends a crafted URI via `resources/read` request, causing 100% CPU utilization, server hang/crash, and denial of service for all clients.

Affected packages

Related vulnerabilities

• GHSA-8r9q-7v3j-jr4g Anthropic's MCP TypeScript SDK has a ReDoS vulnerability Same vulnerability
• CVE-2026-25536 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and… Also affects @modelcontextprotocol/sdk
• GHSA-345p-7cg4-v4c7 @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance… Also affects @modelcontextprotocol/sdk
• CVE-2025-66414 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and… Also affects @modelcontextprotocol/sdk
• GHSA-w48q-cv73-mx4w Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by… Also affects @modelcontextprotocol/sdk
• GHSA-7rx3-28cr-v5wh Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__… Also affects kibana-9.1
• GHSA-442j-39wm-28r2 Handlebars.js has a Property Access Validation Bypass in container.lookup Also affects kibana-9.1
• CVE-2026-33940 Handlebars provides the power necessary to let users build semantic templates. Also affects kibana-9.1