cve.now·· 2 小时前推荐指数55
CVE-2026-111770：MCP TypeScript SDK共享transport致消息跨客户端投递
CVE-2026-111770: Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another
AI 导读
CVE-2026-111770披露Model Context Protocol TypeScript SDK（@modelcontextprotocol/server）存在跨客户端消息投递漏洞。
来源：cve.now · cve.now