modelcontextprotocol go-sdk vulnerabilities
3 published CVEs name modelcontextprotocol go-sdk among the affected products.
- Published CVEs
- 3
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 3Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2026-34742
Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost
modelcontextprotocol · go-sdk
High7.6 - CVE-2026-33252
MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion
modelcontextprotocol · go-sdk
High7.1 - CVE-2026-27896
MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity
modelcontextprotocol · go-sdk
High7.0