Skip to content

[GHSA-w48q-cv73-mx4w] Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default#6858

Closed
asrar-mared wants to merge 2 commits intoasrar-mared/advisory-improvement-6858from
asrar-mared-GHSA-w48q-cv73-mx4w
Closed

[GHSA-w48q-cv73-mx4w] Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default#6858
asrar-mared wants to merge 2 commits intoasrar-mared/advisory-improvement-6858from
asrar-mared-GHSA-w48q-cv73-mx4w

Commits

Commits on Feb 13, 2026

Commits on Feb 16, 2026

Comments