Modelcontextprotocol / GO-Sdk

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-34742	Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost	HIGH	7.6	Apr 2, 2026
CVE-2026-33252	MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion	HIGH	7.1	Mar 23, 2026
CVE-2026-27896	MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity	HIGH	7.0	Feb 26, 2026

Rows per page

Showing 1 to 3 of 3 CVEs