@modelcontextprotocol/client
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies | @modelcontextprotocol/client@modelcontextprotocol/sdk | npm | Medium | Fix reported | |
| MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | @modelcontextprotocol/client@modelcontextprotocol/sdk | npmRed Hat | High | Fix reported |