CVE-2026-63655 · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
The HTTP mode of the @tsparticles/mcp-server package accepts unauthenticated POST /mcp requests and buffers the whole body without a size limit. A remote attacker can send an oversized body to exhaust Node.js memory and terminate the service.
first public Jul 2, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Only deployments that run the MCP server in HTTP mode are exposed, since that mode accepts unauthenticated POST /mcp requests from the network. The stdio mode is not described as affected, and the official Docker configuration that exposes HTTP mode on 0.0.0.0:3000 is the case named in the sources. Teams that only use tsParticles as a animation library in the browser can skip it.
Not affected if auth-required, no-mcp-server, stdio-mode
Who cares docker, mcp, node.js, tsparticles
@tsparticles/mcp-server in your project lockfile (for example package-lock.json or pnpm-lock.yaml).3000 on 0.0.0.0, as in the official Docker configuration.@tsparticles/mcp-server to 4.3.1 or later.tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request-body chunk in a Buffer[] without a cumulative size limit before Buffer.concat and JSON.parse. A remote attacker can stream an arbitrarily large body to exhaust Node.js process memory and terminate the service, including in the official Docker configuration that exposes HTTP mode on 0.0.0.0:3000. Confidentiality and integrity are not affected. This issue is fixed in version 4.3.1.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.