Post
HackerNoon
hackernoon.com
did:plc:kbzotn4ippvrqllcitxglgm2
I found OAuth credential exposure flaws in the official MCP Python and TypeScript SDKs. Why patching CVE-2026-115563 and CVE-2026-104850 may not be enough. #cybersecurity
https://hackernoon.com/the-mcp-server-chose-the-token-endpoint-two-official-sdks-trusted-it
2026-11-02T23:41:38.681Z