{"schemaVersion":3,"id":"CVE-2026-104850","aliases":["CGA-7w3x-vvc9-9qv7","CGA-9v2q-2hwx-v39w","CGA-cv8x-3c5g-mw6c","CGA-hh6c-2xc5-7xj2","GHSA-6qxp-vccf-f47h","CGA-32pc-3493-v83j","CGA-34mq-m95g-chvc","CGA-3895-qcv6-597c","CGA-38gw-q89c-g3mm","CGA-38gx-hm8q-6xmf","CGA-52g2-2x6m-gvqj","CGA-546j-8wgc-jhwp","CGA-54p6-h236-cjcx","CGA-5j29-35hp-pxjp","CGA-626f-x3cq-x2m8","CGA-6845-f4x5-mhw7","CGA-6cqv-h5wf-qqfh","CGA-78rf-6f35-x33h","CGA-7cvp-65v9-4f87","CGA-83qr-wx38-fx67","CGA-89cc-2986-69qm","CGA-8fh9-g855-j2h8","CGA-9j6r-52v7-rxx8","CGA-cg83-8885-hjww","CGA-cmrh-f6wc-7fq3","CGA-f3jq-2c95-8f37","CGA-f4j8-84rc-f9jx","CGA-fh3r-hmfj-6q3m","CGA-g868-92cf-cg94","CGA-gjr6-8rhj-7wqr","CGA-hcw9-8392-76vr","CGA-hrv8-844m-7cxh","CGA-jcrh-9q2p-p9gc","CGA-jf5g-jj9h-2v6c","CGA-jf6x-5crg-h76w","CGA-jg9v-hwr6-6qg9","CGA-mhc7-xrqc-6wh7","CGA-mq4w-hg72-7jfc","CGA-mw29-49c5-9c4g","CGA-phwm-rwx4-c7rx","CGA-qcw7-mj3m-2pg8","CGA-qgxx-rq76-8jcv","CGA-qmvf-v72x-59rg","CGA-qq64-rf5r-4w3v","CGA-r395-m2wx-7r7j","CGA-r939-xvxv-rrpw","CGA-vh97-54hp-qf5w","CGA-vmm8-jpq4-7h6r","CGA-wcj9-xqwc-7c52","CGA-whrx-3wxg-cgr5","CGA-xg4h-j6w9-j337"],"status":"published","duplicateOf":null,"title":null,"description":"MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth client support let the MCP server a client connected to decide which authorization server received the client's OAuth credentials. Stored and pre-provisioned credentials were not bound to the authorization server they belong to. A malicious or compromised MCP server could name its own authorization server in its protected resource metadata. Without any user interaction, the client would send that server the `refresh_token` and `client_secret` stored from an earlier sign-in (1.x), or the configured `client_secret` or signed assertion of a bundled non-interactive provider (1.x and 2.x). Only those applications that use the SDK as an MCP client over HTTP with an `authProvider`: your own `OAuthClientProvider`, or the bundled `ClientCredentialsProvider`, `PrivateKeyJwtProvider`, `StaticPrivateKeyJwtProvider` or (2.x) `CrossAppAccessProvider` and that may connect to an MCP server the owners does not fully trust while holding credentials for a legitimate authorization server are affected. `@modelcontextprotocol/sdk` 1.31.0 (1.x) and `@modelcontextprotocol/client` 2.2.0 (2.x) patch the issue. A workaround for those who cannot upgrade is available. 2.0.0 and 2.1.0 already accept `expectedIssuer`. On 1.x, the only workaround is to connect OAuth-enabled clients only to MCP servers you trust.","dates":{"published":"2026-10-06T16:08:21.514Z","modified":"2026-10-06T16:28:53.097Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00176,"percentile":0.06692,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-07T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00176,"percentile":0.06692}],"last30":[{"date":"2026-10-07T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00176,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00176,"percentile":0.06692}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-345","name":"Insufficient Verification of Data Authenticity","description":"The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/345.html"},{"id":"CWE-522","name":"Insufficiently Protected Credentials","description":"The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/522.html"}],"affected":[{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.1","name":"commercial-gitlab-rails-ee-19.1","label":"commercial-gitlab-rails-ee-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.1","purlType":"apk","versions":[{"text":"< 19.1.7-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.7-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.2","name":"commercial-gitlab-rails-ee-19.2","label":"commercial-gitlab-rails-ee-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.3","name":"commercial-gitlab-rails-ee-19.3","label":"commercial-gitlab-rails-ee-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-19.4","name":"commercial-gitlab-rails-ee-19.4","label":"commercial-gitlab-rails-ee-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.1","name":"commercial-gitlab-rails-ee-fips-19.1","label":"commercial-gitlab-rails-ee-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.1","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.2","name":"commercial-gitlab-rails-ee-fips-19.2","label":"commercial-gitlab-rails-ee-fips-19.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.2","purlType":"apk","versions":[{"text":"< 19.2.7-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.2.7-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.3","name":"commercial-gitlab-rails-ee-fips-19.3","label":"commercial-gitlab-rails-ee-fips-19.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.3","purlType":"apk","versions":[{"text":"< 19.3.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.3.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"commercial-gitlab-rails-ee-fips-19.4","name":"commercial-gitlab-rails-ee-fips-19.4","label":"commercial-gitlab-rails-ee-fips-19.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/commercial-gitlab-rails-ee-fips-19.4","purlType":"apk","versions":[{"text":"< 19.4.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.4.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.2","name":"kibana-9.2","label":"kibana-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.5","name":"kibana-9.5","label":"kibana-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.5","purlType":"apk","versions":[{"text":"< 9.5.4-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.4-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3","purlType":"apk","versions":[{"text":"< 3.225.11-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.11-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4","name":"langfuse-4","label":"langfuse-4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4","purlType":"apk","versions":[{"text":"< 4.54.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.54.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4-worker","name":"langfuse-4-worker","label":"langfuse-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4-worker","purlType":"apk","versions":[{"text":"< 4.54.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.54.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3","name":"langfuse-fips-3","label":"langfuse-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3","purlType":"apk","versions":[{"text":"< 3.225.11-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.225.11-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4","name":"langfuse-fips-4","label":"langfuse-fips-4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4","purlType":"apk","versions":[{"text":"< 4.49.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.49.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4-worker","name":"langfuse-fips-4-worker","label":"langfuse-fips-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4-worker","purlType":"apk","versions":[{"text":"< 4.49.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.49.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2","name":"opensearch-dashboards-2","label":"opensearch-dashboards-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2","purlType":"apk","versions":[{"text":"< 2.19.6-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips","name":"opensearch-dashboards-2-fips","label":"opensearch-dashboards-2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips","purlType":"apk","versions":[{"text":"< 2.19.6-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 4.14.9-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 4.14.9-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3","name":"langfuse-3","label":"langfuse-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3","purlType":"apk","versions":[{"text":"< 3.225.11-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.11-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.11-r8","eol":null,"hubHref":null},{"vendor":"modelcontextprotocol","product":"typescript-sdk","name":"typescript-sdk","label":"typescript-sdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.12.0, < 1.31.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, < 2.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.12.0, < 1.31.0 | ≥ 2.0.0, < 2.2.0","eol":null,"hubHref":"/vendor/modelcontextprotocol/typescript-sdk"},{"vendor":"@modelcontextprotocol","product":"client","name":"@modelcontextprotocol/client","label":"client","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@modelcontextprotocol/client","purlType":"npm","versions":[{"text":"≥ 2.0.0, < 2.2.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.0.0, < 2.2.0","eol":null,"hubHref":null},{"vendor":"@modelcontextprotocol","product":"sdk","name":"@modelcontextprotocol/sdk","label":"sdk","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/@modelcontextprotocol/sdk","purlType":"npm","versions":[{"text":"≥ 1.12.0, < 1.31.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.12.0, < 1.31.0","eol":null,"hubHref":null}],"affectedCount":28,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6qxp-vccf-f47h","label":"github.com/modelcontextprotocol/typescript-sdk/security/advisories/GHSA-6qxp-vccf-f47h","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/modelcontextprotocol/typescript-sdk/pull/2887","label":"github.com/modelcontextprotocol/typescript-sdk/pull/2887","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/modelcontextprotocol/typescript-sdk/commit/edd12e282620ebf770d67316f19cf91d4112a1bd","label":"github.com/modelcontextprotocol/typescript-sdk/commit/edd12e282620ebf770d67316f19cf91d4112a1bd","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/modelcontextprotocol/typescript-sdk/releases/tag/v2.2.0","label":"github.com/modelcontextprotocol/typescript-sdk/releases/tag/v2.2.0","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104850.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104850.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104850","label":"nvd.nist.gov/vuln/detail/CVE-2026-104850","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/modelcontextprotocol/typescript-sdk","label":"github.com/modelcontextprotocol/typescript-sdk","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-06T16:08:21.514Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-06T16:28:53.097Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:25:47.664Z","stale":false,"partial":false}}