Issues · modelcontextprotocol/typescript-sdk · GitHub

Labels Milestones New issue

Stateless mode: per-request McpServer+Protocol allocation causes memory leak at scale

#2090

· RomKadria opened

on May 14, 2026

[SEP-1613 regression] tools/list still emits draft-07 in 1.29.0 — `target` option missing from mcp.js `toJsonSchemaCompat` calls

#2084

· rsalus opened

on May 14, 2026

Type inconsistency: StreamableHTTPServerTransport.onclose widens Transport interface contract under exactOptionalPropertyTypes

#2083

· swadel opened

on May 13, 2026

Security scan results for typescript-sdk — MCPSafe AIVSS 53/100 (Grade F)

#2078

· mcpsafe-gh opened

on May 12, 2026

client code can't execute inside browser due to import spawn

#2077

· scastria opened

on May 12, 2026

`resetTimeoutOnProgress` on low-level `request()` only works when `onprogress` is explicitly provided

#2076

· ContextVM-org opened

on May 12, 2026

`registerPrompt()` silently drops `icons` from PromptDefinition config

#2054

· khill1269 opened

on May 12, 2026

High-severity CVEs via pnpm audit

#2048

· morozow opened

on May 11, 2026

Security: Transitive dependencies with known vulnerabilities in @modelcontextprotocol/sdk@1.29.0

#2042

· morozow opened

on May 10, 2026

DEFAULT_INHERITED_ENV_VARS

#2037

· pkailas opened

on May 9, 2026

Bump hono and fast-uri to versions covering published GHSA advisories

#2036

· irparent opened

on May 9, 2026

auth() silently swallows non-OAuthError exceptions from refreshAuthorization / saveTokens, preventing token persistence

#2034

· jbsky opened

on May 8, 2026