TuxCare rebuilt @modelcontextprotocol/sdk to address 6 CVEs. Fixed in 1.13.3-tuxcare.2.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1793112371.json"
{ "base_version": "1.13.3", "fixed_version": "1.13.3-tuxcare.2" }