All 4 CVE vulnerabilities found in tsparticles, with AI-generated Chinese analysis, references, and POCs.
Vendor: tsparticles
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76892 | tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process CWE-248 | 8.7 | High | 2026-11-04 |
| CVE-2026-76826 | tsParticles: Generated release notes can execute shell commands in the stable publish workflow CWE-78 | 7.5 | High | 2026-11-04 |
| CVE-2026-76893 | tsParticles: A single anonymous MCP session can monopolize HTTP mode and deny new clients CWE-400 | 6.9 | Medium | 2026-11-04 |
| CVE-2026-63655 | tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS CWE-400 | 7.5 | High | 2026-11-04 |
All 4 known CVE vulnerabilities affecting tsparticles with full Chinese analysis, references, and POCs where available.