CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Page 1

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost

MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2026-59950	MCP Python SDK: WebSocket server transport does not support Host/Origin validation	HIGH	7.6	0.23%	Jul 15, 2026
CVE-2026-52870	MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks	HIGH	7.6	0.39%	Jul 15, 2026
CVE-2026-52869	MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal	HIGH	7.1	0.53%	Jul 15, 2026
CVE-2025-66416	DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost	HIGH	7.6	0.51%	Dec 2, 2025
CVE-2025-53366	MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service	HIGH	8.7	7.69%	Jul 4, 2025
CVE-2025-53365	MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service	HIGH	8.7	0.39%	Jul 4, 2025

Rows per page

Showing 1 to 6 CVEs · page 1