GHSA-w48q-cv73-mx4w
NoneCVSS
—
EPSS
—
Published
Dec 2, 2025
CISA due date
—
The record
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @modelcontextprotocol/sdk | 0 | 1.24.0 |
| Chainguard | kibana-9.1 | 0 | 9.1.8-r1 |
| Chainguard | kibana-9.1-bitnami | 0 | 9.1.8-r1 |
| Chainguard | kibana-9.1-iamguarded | 0 | 9.1.8-r1 |
| Chainguard | kibana-9.2 | 0 | 9.2.2-r1 |
| Chainguard | kibana-9.2-iamguarded | 0 | 9.2.2-r1 |
| Chainguard | langfuse-3 | 0 | 3.137.0-r1 |
| Chainguard | langfuse-3-compat | 0 | 3.137.0-r1 |
| Chainguard | langfuse-3-worker | 0 | 3.137.0-r1 |
| Chainguard | langfuse-web-3 | 0 | 3.137.0-r1 |
| Chainguard | langfuse-web-compat | 0 | 3.137.0-r1 |
| Chainguard | langfuse-worker-3 | 0 | 3.137.0-r1 |
| Chainguard | librechat | 0 | 0.8.0-r6 |
| Chainguard | librechat-compat | 0 | 0.8.0-r6 |
| Chainguard | librechat-dev | 0 | 0.8.0-r6 |
| Chainguard | opensearch-dashboards-2 | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-alerting-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-anomaly-detection-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-compat | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-config | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-dashboards-maps | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-dashboards-notifications | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-dashboards-observability | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-dashboards-query-workbench | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-dashboards-reporting | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-dashboards-search-relevance | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-dashboards-visualizations | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-alerting-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-config | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-maps | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-notifications | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-observability | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-query-workbench | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-reporting | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-search-relevance | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-visualizations | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-index-management-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-ml-commons-dashboards | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-security-analytics-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-fips-security-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-index-management-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-ml-commons-dashboards | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-security-analytics-dashboards-plugin | 0 | 2.19.4-r3 |
| Chainguard | opensearch-dashboards-2-security-dashboards-plugin | 0 | 2.19.4-r3 |
| Wolfi | langfuse-3 | 0 | 3.137.0-r1 |
| Wolfi | langfuse-3-compat | 0 | 3.137.0-r1 |
| Wolfi | langfuse-3-worker | 0 | 3.137.0-r1 |
| Wolfi | langfuse-web-3 | 0 | 3.137.0-r1 |
| Wolfi | langfuse-web-compat | 0 | 3.137.0-r1 |
| Wolfi | langfuse-worker-3 | 0 | 3.137.0-r1 |
| Wolfi | opensearch-dashboards-2 | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-alerting-dashboards-plugin | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-anomaly-detection-dashboards-plugin | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-compat | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-config | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-dashboards-maps | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-dashboards-notifications | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-dashboards-observability | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-dashboards-query-workbench | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-dashboards-reporting | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-dashboards-search-relevance | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-dashboards-visualizations | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-index-management-dashboards-plugin | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-ml-commons-dashboards | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-security-analytics-dashboards-plugin | 0 | 2.19.4-r3 |
| Wolfi | opensearch-dashboards-2-security-dashboards-plugin | 0 | 2.19.4-r3 |
Related vulnerabilities
- CVE-2025-66414 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and… Same vulnerability
- CVE-2026-25536 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and… Also affects @modelcontextprotocol/sdk
- GHSA-345p-7cg4-v4c7 @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance… Also affects @modelcontextprotocol/sdk
- GHSA-8r9q-7v3j-jr4g Anthropic's MCP TypeScript SDK has a ReDoS vulnerability Also affects @modelcontextprotocol/sdk
- CVE-2026-0621 Anthropic's MCP TypeScript SDK has a ReDoS vulnerability Also affects @modelcontextprotocol/sdk
- GHSA-7rx3-28cr-v5wh Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__… Also affects kibana-9.1
- GHSA-442j-39wm-28r2 Handlebars.js has a Property Access Validation Bypass in container.lookup Also affects kibana-9.1
- CVE-2026-33940 Handlebars provides the power necessary to let users build semantic templates. Also affects kibana-9.1