CLSA-2026-1793887996

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1793887996.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1793887996
Upstream
CVE (3)
Published
2026-11-05T15:13:17Z
Modified
2026-11-06T13:15:16Z
Summary
TuxCare security update for @modelcontextprotocol/sdk (3 CVEs)
Details

TuxCare rebuilt @modelcontextprotocol/sdk to address 3 CVEs. Fixed in 1.17.3-tuxcare.4.

Affected packages

TuxCare:npm / @modelcontextprotocol/sdk

Package

Name
@modelcontextprotocol/sdk
Purl
pkg:npm/%40modelcontextprotocol/sdk

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.17.3-tuxcare.0
Fixed
1.17.3-tuxcare.4

Affected versions

1.*
1.17.3-tuxcare.1
1.17.3-tuxcare.2
1.17.3-tuxcare.3
1.17.3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1793887996.json"
tuxcare 
{
    "base_version": "1.17.3",
    "fixed_version": "1.17.3-tuxcare.4"
}