VYPR

server-legacy

by @modelcontextprotocol

Source repositories

CVEs (1)

  • CVE-2026-111771Oct 20, 2026
    risk 0.00cvss —epss —

    ### Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server (its audience). Where one authorization server issues tokens for several services, a valid token for another service was also accepted by…