github.com/modelcontextprotocol/go-sdk vulnerabilities (Go)

4 vulnerabilities.

• github.com/modelcontextprotocol/go-sdk Go Model Context Protocol Go SDK: DNS Rebinding Protection Disabled by Default for Servers Running on Localhost CVE-2026-34742 Fix available 7.6 HighApril 1, 2026
• github.com/modelcontextprotocol/go-sdk Go MCP Go SDK Allows Cross-Site Tool Execution for HTTP Servers without Authorizatrion CVE-2026-33252 Fix available 7.1 HighMarch 19, 2026
• github.com/modelcontextprotocol/go-sdk Go Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk GHSA-q382-vc8q-7jhj Fix available 8.2 HighMarch 19, 2026
• github.com/modelcontextprotocol/go-sdk Go MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity CVE-2026-27896 Fix available 7.0 HighFebruary 26, 2026