mcp/sdk
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter | mcp/sdk | Composer | High | Fix reported | |
| OAuth middleware endpoints bypass request body limits and allow unauthenticated memory exhaustion | mcp/sdk | Composer | Unknown | No fix reported |