Evidence · DiggingBeagle record
MCP TypeScript SDK GHSA-46jr-4wx8-v453: tool input element exhaustion
Maintainer reproduces a JavaScript heap crash using a request within the nominal body-size limit; optional element bound added but disabled by default.
- Source role
- primary disclosure
Evidence record
Maintainer reproduces a JavaScript heap crash using a request within the nominal body-size limit; optional element bound added but disabled by default.
Claim-level citations (2)
- supportsDense MCP tool arguments can exhaust memory below the HTTP byte cap: SDK 1.32.0 and server 2.3.0 add maxToolInputElements, but the limit is not enabled by a package upgrade alone.
Fix; configuration example
- supportsDense MCP tool arguments can exhaust memory below the HTTP byte cap: The official advisory documents JavaScript heap exhaustion from one HTTP request below the default 4 MiB request limit.
Summary; reproduction and impact