Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
High severity
GitHub Reviewed
Published
Dec 2, 2025
in
modelcontextprotocol/typescript-sdk
•
Updated Dec 2, 2025
Give feedback on Dependabot alerts