@tsparticles/mcp-server process terminated by malformed JSON request
Anyone can stop an AI tool connection server with one bad request.
Summary
A single malformed JSON request terminates the @tsparticles/mcp-server process in HTTP mode. No authentication is needed to send it, and the service stays down until an external supervisor restarts it.
Affected when
- @tsparticles/mcp-server running in HTTP mode
What to do
Update to version 4.3.1.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen