Modelcontextprotocol / Java-Sdk

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-35568	MCP Java-SDK has a DNS Rebinding Vulnerability	HIGH	7.6	Apr 7, 2026
CVE-2026-34237	MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)	MEDIUM	6.1	Mar 31, 2026

Rows per page

Showing 1 to 2 of 2 CVEs