CVE-2026-63655— tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

Quick assessment

Affected

tsparticles tsparticles

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

tsParticles 是一个用于创建高度可定制粒子动画的 TypeScript 库。在 4.3.1 版本之前，@tsparticles/mcp-server 的 HTTP 模式在 integrations/mcp-server/src/index.ts 中接受未经身份验证的 POST /mcp 请求，并在调用 Buffer.concat 和 JSON.parse 之前，将每个请求体数据块累积到一个 Buffer[] 中，且未设置累计大小限制。远程攻击者可以流式传输任意大的请求体，从而耗尽 Node.js 进程内存

CVSS 7.5 · High Updated Nov 05, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

Source: CVE Program / CVE List V5

Vulnerability Description

tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request-body chunk in a Buffer[] without a cumulative size limit before Buffer.concat and JSON.parse. A remote attacker can stream an arbitrarily large body to exhaust Node.js process memory and terminate the service, including in the official Docker configuration that exposes HTTP mode on 0.0.0.0:3000. Confidentiality and integrity are not affected. This issue is fixed in version 4.3.1.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

未加控制的资源消耗(资源穷尽)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
tsparticles	tsparticles	< 4.3.1	-
@tsparticles	mcp-server	< 4.3.1	-

II. Public POCs for CVE-2026-63655

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-63655

请登录查看更多情报信息。

Other References for CVE-2026-63655 (5)

https://github.com/tsparticles/tsparticles/pull/5875 x_refsource_MISC
https://github.com/tsparticles/tsparticles/releases/tag/v4.3.1 x_refsource_MISC
https://github.com/tsparticles/tsparticles/security/advisories/GHSA-447x-qqwf-m7xq x_refsource_CONFIRM
https://github.com/tsparticles/tsparticles/commit/25fb70e7f527a91568adaef576570289083f243b x_refsource_MISC
https://github.com/tsparticles/tsparticles/commit/7b3a9488d4201fe9ddd5fec05f4a2ae65d3627ea x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-63655

Same Patch Batch · tsparticles · 2026-11-04 · 4 CVEs total

CVE-2026-76892	8.7 HIGH	tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP proces
CVE-2026-76826	7.5 HIGH	tsParticles: Generated release notes can execute shell commands in the stable publish work
CVE-2026-76893	6.9 MEDIUM	tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients

IV. Related Vulnerabilities

Same product: tsparticles

Same vendor: tsparticles

Same weakness: CWE-400