CVE-2026-76892
2026-11-04
23h17 +00:00
23h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server calls JSON.parse outside a request-local error boundary in the POST /mcp handler in integrations/mcp-server/src/index.ts. A single unauthenticated malformed JSON body raises a SyntaxError that terminates the Node.js process, leaving the MCP service unavailable until an external supervisor restarts it. This issue is fixed in version 4.3.1.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Uncaught Exception An exception is thrown from a function, but it is not caught. |
