Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

mark3labs vulnerabilities

3 published CVEs name mark3labs among the affected products.

Newest CVEs

  • CVE-2026-123272

    mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata

    mark3labs · mcp-go

    Medium5.1
  • CVE-2026-108859

    mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

    mark3labs · mcp-go

    High8.7
  • CVE-2026-81092

    mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding

    mark3labs · mcp-go

    High7.6