@modelcontextprotocol/client
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting @modelcontextprotocol/clientpage 1 of 1
- CVE-2026-104850HIGHCVSS 7.5EG 7.5fixed in 2.2.02026-10-06
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to de…
- CVE-2026-111769MEDIUMCVSS 6.5EG 6.5fixed in 2.3.02026-10-20
The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in @modelcontextprotocol/client, the HTT…
Check whether @modelcontextprotocol/client is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for @modelcontextprotocol/client CVEs against the assets you own.
Book a Demo →