modelcontextprotocol Summary
Latest vulnerabilities published by modelcontextprotocol
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Session Management Flaw in MCP TypeScript SDK Affects Multiple Versions
CVE-2026-111767ModelcontextprotocolTypescript-sdk8.6HIGHMemory Exhaustion Vulnerability in Model Context Protocol Python SDK
CVE-2026-109527ModelcontextprotocolPython-sdk7.5HIGHMemory Flooding Vulnerability in Model Context Protocol SDK by Model Context Protocol
CVE-2026-108395ModelcontextprotocolIo.modelcontextprotoco...7.5HIGHMemory Retention Vulnerability in MCP Python SDK Affecting FastMCP and MCPServer
CVE-2026-59951ModelcontextprotocolPython-sdk6.9MEDIUMUncontrolled Memory Allocation in MCP Kotlin SDK by Model Context Protocol
CVE-2026-108714ModelcontextprotocolKotlin-sdk8.7HIGHOAuth Vulnerability in MCP TypeScript SDK Affecting Model Context Protocol Servers
CVE-2026-104850ModelcontextprotocolTypescript-sdk7.5HIGHServer-Side Request Forgery Vulnerability in ModelContextProtocol's Fetch Tool
CVE-2026-104120ModelcontextprotocolMcp-server-fetch👾🟡6.9MEDIUMSecurity Flaw in Model Context Protocol Rust SDK Allows Token Replay Attacks
CVE-2026-64684ModelcontextprotocolRust-sdk6.8MEDIUMOAuth Implementation Flaw in RMCP Rust SDK Affects Model Context Protocol
CVE-2026-63127ModelcontextprotocolRust-sdk8.2HIGHVulnerability in Rust SDK's Streamable HTTP Server Affects Model Context Protocol Products
CVE-2026-63128ModelcontextprotocolRust-sdk7.5HIGHDenial of Service Vulnerability in MCP Kotlin SDK by Model Context Protocol
CVE-2026-53937ModelcontextprotocolIo.modelcontextprotoco...6.2MEDIUMMemory Exhaustion Vulnerability in MCP PHP SDK Affects Model Context Protocol
CVE-2026-53965ModelcontextprotocolPHP-sdk6.9MEDIUMSession ID Binding Issue in MCP Ruby SDK by Model Context Protocol
CVE-2026-67431ModelcontextprotocolRuby-sdk8.3HIGHSession Management Flaw in MCP Ruby SDK Affects Memory Management
CVE-2026-67430ModelcontextprotocolRuby-sdk5.3MEDIUMWebSocket Handshake Vulnerability in MCP Python SDK by Model Context Protocol
CVE-2026-59950ModelcontextprotocolPython-sdk7.6HIGHImproper Task Handling in Python SDK by Model Context Protocol
CVE-2026-52870ModelcontextprotocolPython-sdk7.6HIGHVulnerability in MCP Python SDK Affects JSON-RPC Message Security
CVE-2026-52869ModelcontextprotocolPython-sdk7.1HIGHImproper Token Validation in MCP Registry Affecting Multiple Deployments
CVE-2026-44428ModelcontextprotocolRegistry2.1LOWOpen Redirect Vulnerability in MCP Registry Affects Model Context Protocol
CVE-2026-44427ModelcontextprotocolRegistryNONEStored Cross-Site Scripting in MCP Registry by Model Context Protocol
CVE-2026-44429ModelcontextprotocolRegistry5.1MEDIUMVulnerability in MCP Registry Affects Network Security
CVE-2026-44430ModelcontextprotocolRegistry6.3MEDIUMImproper Ownership Validation in MCP Registry Affects Multiple Clients
CVE-2026-45781ModelcontextprotocolRegistry3.5LOWVulnerability in RMCP Rust SDK Allows DNS Rebinding Attacks on MCP Servers
CVE-2026-42559ModelcontextprotocolRust-sdk👾🟡8.8HIGHDNS Rebinding Vulnerability in MCP Java SDK by Model Context Protocol
CVE-2026-35568ModelcontextprotocolJava-sdk7.6HIGHDNS Rebinding Vulnerability in Go MCP SDK by Model Context Protocol
CVE-2026-34742ModelcontextprotocolGo-sdk7.6HIGH