mcp vulnerabilities (PyPI)
10 vulnerabilities.
-
mcpPyPI Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas 6.5 Medium -
mcpPyPI Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies 5.9 Medium -
mcpPyPI Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server 6.8 Medium -
mcpPyPI MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion 6.9 Medium -
mcpPyPI MCP Python SDK: WebSocket server transport does not support Host/Origin validation 7.6 High -
mcpPyPI MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks 7.6 High -
mcpPyPI MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal 7.1 High -
mcpPyPI DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost 7.6 High -
mcpPyPI MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service 8.7 High -
mcpPyPI MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service 8.7 High