Search results

Security scan results for typescript-sdk — MCPSafe AIVSS 53/100 (Grade F)

Status: Open.

#2078 In modelcontextprotocol/typescript-sdk;

· mcpsafe-gh opened on May 12, 2026

client code can't execute inside browser due to import spawn

bugSomething isn't workingSomething isn't working

Status: Open.

#2077 In modelcontextprotocol/typescript-sdk;

· scastria opened on May 12, 2026

resetTimeoutOnProgress on low-level request() only works when onprogress is explicitly provided

Status: Open.

#2076 In modelcontextprotocol/typescript-sdk;

· ContextVM-org opened on May 12, 2026

registerPrompt() silently drops icons from PromptDefinition config

Status: Open.

#2054 In modelcontextprotocol/typescript-sdk;

· khill1269 opened on May 12, 2026

High-severity CVEs via pnpm audit

bugSomething isn't workingSomething isn't working

Status: Open.

#2048 In modelcontextprotocol/typescript-sdk;

· morozow opened on May 11, 2026

Security: Transitive dependencies with known vulnerabilities in @modelcontextprotocol/sdk@1.29.0

Status: Open.

#2042 In modelcontextprotocol/typescript-sdk;

· morozow opened on May 10, 2026

DEFAULT_INHERITED_ENV_VARS

Status: Open.

#2037 In modelcontextprotocol/typescript-sdk;

· pkailas opened on May 9, 2026

Bump hono and fast-uri to versions covering published GHSA advisories

Status: Open.

#2036 In modelcontextprotocol/typescript-sdk;

· irparent opened on May 9, 2026

auth() silently swallows non-OAuthError exceptions from refreshAuthorization / saveTokens, preventing token persistence

bugSomething isn't workingSomething isn't working

Status: Open.

#2034 In modelcontextprotocol/typescript-sdk;

· jbsky opened on May 8, 2026

Feature request: allow customizing taskId in InMemoryTaskStore

enhancementRequest for a new feature that's not currently supportedRequest for a new feature that's not currently supported

Status: Open.

#2032 In modelcontextprotocol/typescript-sdk;

· jirispilka opened on May 8, 2026

Client should silently refresh access tokens on 401 when a refresh token is available

Status: Open.

#2031 In modelcontextprotocol/typescript-sdk;

· waddah12alhajar opened on May 8, 2026

Completables should pass through authInfo and signal

enhancementRequest for a new feature that's not currently supportedRequest for a new feature that's not currently supported

Status: Open.

#2029 In modelcontextprotocol/typescript-sdk;

· icopp opened on May 7, 2026