漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
MCP TypeScript SDK UriTemplate Exploded Array Pattern ReDoS
Vulnerability Description
Anthropic's MCP TypeScript SDK versions up to and including 1.25.1 contain a regular expression denial of service (ReDoS) vulnerability in the UriTemplate class when processing RFC 6570 exploded array patterns. The dynamically generated regular expression used during URI matching contains nested quantifiers that can trigger catastrophic backtracking on specially crafted inputs, resulting in excessive CPU consumption. An attacker can exploit this by supplying a malicious URI that causes the Node.js process to become unresponsive, leading to a denial of service.
CVSS Information
N/A
Vulnerability Type
CWE-1333
Vulnerability Title
MCP TypeScript SDK 安全漏洞
Vulnerability Description
MCP TypeScript SDK是Model Context Protocol开源的一个用于模型上下文协议服务器和客户端的开发者工具包。 MCP TypeScript SDK 1.25.1及之前版本存在安全漏洞，该漏洞源于UriTemplate类处理RFC 6570爆炸数组模式时存在正则表达式拒绝服务，可能导致CPU消耗过高和拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A