Is @modelcontextprotocol/sdk safe?
8 fixed advisories Facts from the mcp-audit registry about the npm package @modelcontextprotocol/sdk. The same data is served as JSON.
Check it from your terminal
mcp-audit vet @modelcontextprotocol/sdkOffline: it uses the registry bundled with mcp-audit. mcp-audit update-registry fetches the newest one.
Registry facts
| Maintainer | Anthropic |
|---|---|
| Verified publisher | yes |
| Entry last checked | 2026-08-22 |
| Hash pins | none recorded |
| Provenance expected | yes; a missing Sigstore attestation is reported (ATTEST-013) with --verify-signatures |
| Repository | https://github.com/modelcontextprotocol/typescript-sdk |
Recorded advisories 8
| Advisory | CVSS | Summary | Fixed in |
|---|---|---|---|
| CVE-2025-66414 | not recorded | Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default | 1.24.0 |
| CVE-2026-0621 | not recorded | Anthropic's MCP TypeScript SDK has a ReDoS vulnerability | 1.25.2 |
| CVE-2026-104850 | not recorded | MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | 1.31.0 |
| CVE-2026-25536 | not recorded | @modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse | 1.26.0 |
| CVE-2026-111767 | not recorded | MCP TypeScript SDK: Experimental tasks were not tied to the session that created them | 1.32.0 |
| CVE-2026-111768 | not recorded | MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation | 1.32.0 |
| CVE-2026-111769 | not recorded | MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies | 1.32.0 |
| CVE-2026-111771 | not recorded | MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service | 1.32.0 |
Advisories with no recorded fix are listed first. CVE IDs link to NVD, GHSA IDs to GitHub and other IDs to OSV. A fixed advisory affects only versions below its fix; vet exits 1 only for advisories with no fix.
What it can do
No capability tags are recorded for this package yet.
Check how you run it
This page describes the public package. What matters is your setup: which version you pin, which secrets you pass, and which other servers sit next to it.
mcp-audit checkBadge for your README
mcp-audit8 fixed CVEs
Preview drawn by this page. The real badge is rendered by shields.io from this JSON and updates when the registry does.
[](https://mcp-audit.dev/servers/npm/at-modelcontextprotocol-sdk/)