HIGHPackagist
GHSA-7m52-jw36-44r3· CVE-2026-53965MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter
Modified: 8/19/2026
package
Packagist/mcp/sdk
pkg:packagist/mcp/sdk
package
pkg:packagist/mcp/sdk
MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter
Modified: 8/19/2026