io.modelcontextprotocol.sdk:mcp-core vulnerabilities (Maven)

2 vulnerabilities.

• io.modelcontextprotocol.sdk:mcp-core Maven MCP Java-SDK has a DNS Rebinding Vulnerability CVE-2026-35568 Fix available 7.6 HighApril 7, 2026
• io.modelcontextprotocol.sdk:mcp-core Maven MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *) CVE-2026-34237 Fix available 6.1 MediumMarch 30, 2026