{"id":"EUVD-2026-0800","enisaUuid":"830ffc21-637f-307b-b447-262c70ba3a77","description":"Anthropic\u0027s MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regular expression used during URI matching contains nested quantifiers that can trigger catastrophic backtracking on specially crafted inputs, resulting in excessive CPU consumption. An attacker can exploit this by supplying a malicious URI that causes the Node.js process to become unresponsive, leading to a denial of service.","datePublished":"Jan 5, 2026, 8:57:14 PM","dateUpdated":"Oct 8, 2026, 3:21:41 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/modelcontextprotocol/typescript-sdk/issues/965\nhttps://www.vulncheck.com/advisories/mcp-typescript-sdk-uritemplate-exploded-array-pattern-redos\n","aliases":"CVE-2026-0621\nGHSA-8r9q-7v3j-jr4g\n","assigner":"VulnCheck","epss":0.44,"enisaIdProduct":[{"id":"28deb8af-ad92-31dc-903a-da116e8119c5","product":{"name":"MCP TypeScript SDK","vendor":{"name":"Anthropic"}},"product_version":"0 ≤1.25.1"}],"enisaIdVendor":[{"id":"e880cd23-2a5b-3d84-b22b-8b0ce238adad","vendor":{"name":"Anthropic"}}],"enisaIdVulnerability":[{"id":"9bdb619f-527f-338c-b30e-3a89a61c7a3f","vulnerability":{"id":"GHSA-8r9q-7v3j-jr4g","description":"Anthropic\u0027s MCP TypeScript SDK has a ReDoS vulnerability","datePublished":"Jan 5, 2026, 9:30:33 PM","dateUpdated":"Jul 15, 2026, 6:32:03 PM","baseScore":0.0,"references":"https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-cqwc-fm46-7fff\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-0621\nhttps://github.com/modelcontextprotocol/typescript-sdk/issues/965\nhttps://github.com/modelcontextprotocol/typescript-sdk/commit/7f0cf730\nhttps://github.com/modelcontextprotocol/typescript-sdk/commit/b392f02ffcf37c088dbd114fedf25026ec3913d3\nhttps://github.com/modelcontextprotocol/typescript-sdk\nhttps://github.com/modelcontextprotocol/typescript-sdk/releases/tag/v1.25.2\nhttps://www.vulncheck.com/advisories/mcp-typescript-sdk-uritemplate-exploded-array-pattern-redos\n","enisa_id":"EUVD-2026-0800\n","aliases":"GHSA-8r9q-7v3j-jr4g\nCVE-2026-0621\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:57:39 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f006ebe2-e30b-330d-a770-c4b09e2c9a07","vulnerability":{"id":"CVE-2026-0621","description":"Anthropic\u0027s MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regular expression used during URI matching contains nested quantifiers that can trigger catastrophic backtracking on specially crafted inputs, resulting in excessive CPU consumption. An attacker can exploit this by supplying a malicious URI that causes the Node.js process to become unresponsive, leading to a denial of service.","datePublished":"Jan 5, 2026, 8:57:14 PM","dateUpdated":"Oct 8, 2026, 3:21:41 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/modelcontextprotocol/typescript-sdk/issues/965\nhttps://www.vulncheck.com/advisories/mcp-typescript-sdk-uritemplate-exploded-array-pattern-redos\n","enisa_id":"EUVD-2026-0800\n","assigner":"VulnCheck","epss":0.44,"dataProcessed":"Nov 1, 2026, 1:38:51 AM","vulnerabilityProduct":[{"id":"00d4f289-7393-32d1-b9f5-85c6d32fbc77","product":{"name":"MCP TypeScript SDK","vendor":{"name":"Anthropic"}},"product_version":"0 ≤1.25.1"}],"vulnerabilityVendor":[{"id":"e0d51e58-afe2-32be-ab0b-9208471dee87","vendor":{"name":"Anthropic"}}]}}],"enisaIdAdvisory":[{"id":"f7beaccb-a909-3004-b9cb-a6ce02783da5","advisory":{"id":"WID-SEC-W-2026-0328","description":"IBM App Connect Enterprise Certified Container: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise Certified Container ausnutzen, um beliebigen Programmcode auszuführen, einen Denial-of-Service-Zustand zu verursachen, die Authentifizierung zu umgehen, vertrauliche Informationen zu manipulieren oder offenzulegen.","datePublished":"Feb 5, 2026, 11:00:00 PM","dateUpdated":"Feb 5, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0328.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0328\n","aliases":"CVE-2025-13491\nCVE-2025-61727\nCVE-2025-61729\nCVE-2026-0621\nCVE-2026-21226\nCVE-2026-22817\nCVE-2026-22818\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"2b27ce9d-221b-3706-8178-246dc53025d2","product":{"name":"Certified Container LTS 12.20.0","vendor":{"name":"IBM"}}},{"id":"680512bf-1baa-3351-89bd-2e1d38f12236","product":{"name":"Certified Container 12.20.0","vendor":{"name":"IBM"}}},{"id":"d5f84987-e177-3c41-96eb-13891800bed2","product":{"name":"App Connect Enterprise","vendor":{"name":"IBM"}}}]}}]}