modelcontextprotocol rust-sdk vulnerabilities
4 published CVEs name modelcontextprotocol rust-sdk among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-64684
RMCP: Custom HTTP headers leak to cross-origin redirect targets
modelcontextprotocol · rust-sdk
Medium6.8 - CVE-2026-63127
RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery
modelcontextprotocol · rust-sdk
High8.2 - CVE-2026-63128
RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service
modelcontextprotocol · rust-sdk
High7.5 - CVE-2026-42559
RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport
modelcontextprotocol · rust-sdk
High8.8