Lfprojects Mcp Typescript Sdk — known CVE vulnerabilities

Every CVE whose affected-product data names Lfprojects Mcp Typescript Sdk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-66414 — CVSS 8.1 (high): MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Prior to 1.24.0, The Model Context…
• CVE-2026-0621 — CVSS 7.5 (high): Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in…
• CVE-2026-25536 — CVSS 7.1 (high): MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.10.0 to 1.25.3…