modelcontextprotocol

modelcontextprotocol java-sdk vulnerabilities

2 published CVEs name modelcontextprotocol java-sdk among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2026-35568
MCP Java-SDK has a DNS Rebinding Vulnerability
modelcontextprotocol · java-sdk
High7.6
CVE-2026-34237
MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)
modelcontextprotocol · java-sdk
Medium6.1

Most common weaknesses