GHSA-22jm-h49p-29qw: MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

Summary

Affected versions of the MCP TypeScript SDK (@modelcontextprotocol/sdk 1.24.0 through 1.31.0) did not check which session created an experimental task. Clients sharing one InMemoryTaskStore could list, read and cancel each other's tasks. Only servers that pass taskStore to McpServer or Server are affected.

Mitigation

Upgrade to @modelcontextprotocol/sdk 1.32.0 or later. If you cannot upgrade yet, remove taskStore, or create one InMemoryTaskStore per session.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• @modelcontextprotocol/sdknpmLLM dependency since 2024-11-11 · 18 tracked dependents

Topics

• Model Context Protocol

Related items

• HighGHSA-46jr-4wx8-v453: MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validationSame vendor · GitHub Advisory Database
• MediumGHSA-6prh-2h8m-c8cw: MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodiesSame vendor · GitHub Advisory Database
• HighCVE-2026-96620: Claude Agent SDK argument injection via resume option enabling command executionSame vendor · NVD/CVE Database
• MediumGHSA-84m7-p3x7-pcfv: MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource ExhaustionSame vendor · GitHub Advisory Database
• HighCVE-2026-86063: Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow…Same vendor · NVD/CVE Database