{"data":{"id":"41733cfd-239a-4b00-8216-3d7697020b44","title":"GHSA-46jr-4wx8-v453: MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation","summary":"The MCP TypeScript SDK (`@modelcontextprotocol/sdk` 1.3.0 through 1.31.0, and `@modelcontextprotocol/server` 2.0.0 through 2.2.0) placed no limit on the number of array elements and object keys it validated per request. A single HTTP request within the default 4 MiB size limit can exhaust server memory and abort the process with `JavaScript heap out of memory`. No credentials are needed unless requests are authenticated before reaching the SDK, and stdio-only servers are not affected.","solution":"Upgrade to `@modelcontextprotocol/sdk` 1.32.0 or later, or `@modelcontextprotocol/server` 2.3.0 or later, then set the new `maxToolInputElements` option on `McpServer` (off by default), for example `new McpServer(info, { maxToolInputElements: 10_000 })`. Also lower the request size limit with `maxRequestBodySize` on the transport or `createMcpHandler()`, or the body parser's limit if the body is parsed manually. If upgrading is not possible yet, set `maxRequestBodySize`, which requires `@modelcontextprotocol/sdk` 1.30.1 or `@modelcontextprotocol/server` 2.1.0, or use a reverse proxy.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-46jr-4wx8-v453","publishedAt":"2026-10-20T20:06:35.000Z","cveId":"CVE-2026-111768","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["@modelcontextprotocol/server@>= 2.0.0, < 2.3.0 (fixed: 2.3.0)","@modelcontextprotocol/sdk@>= 1.3.0, < 1.32.0 (fixed: 1.32.0)"],"affectedPackageNames":["@modelcontextprotocol/server","@modelcontextprotocol/sdk"],"affectedPackageRefs":["npm:@modelcontextprotocol/server","npm:@modelcontextprotocol/sdk"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["MCP TypeScript SDK"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-21T00:11:14.891Z","kevDateAdded":null,"advisoryAliases":["GHSA-46jr-4wx8-v453"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-20T20:06:35.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}