Merge pull request #807 from chr-hertel/mcp-sdk-26-08-14

Add mcp/sdk HTTP OOM CVE for Client -> Server

Author: glaubinix

mcp/sdk/CVE-2026-53965.yaml

@@ -0,0 +1,9 @@
+title:     Client HttpTransport SSE buffer grows unbounded when server withholds the event delimiter
+link:      https://github.com/modelcontextprotocol/php-sdk/security/advisories/GHSA-7m52-jw36-44r3
+cve:       CVE-2026-53965
+branches:
+    main:
+        time:     2026-08-14 06:19:00
+        versions: ['>=0.5.0', '<0.7.1']
+
+reference: composer://mcp/sdk