Modelcontextprotocol / Rust-Sdk

4 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-64684	RMCP: Custom HTTP headers leak to cross-origin redirect targets	MEDIUM	6.8	Sep 16, 2026
CVE-2026-63127	RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery	HIGH	8.2	Sep 16, 2026
CVE-2026-63128	RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service	HIGH	7.5	Sep 16, 2026
CVE-2026-42559	RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport	HIGH	8.8	May 14, 2026

Rows per page

Showing 1 to 4 of 4 CVEs