mcp vulnerabilities (RubyGems)
6 vulnerabilities.
-
mcpRubyGems MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport 7.5 High -
mcpRubyGems MCP Ruby SDK: Ruby SSE Session Poisoning 8.3 High -
mcpRubyGems MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS) 6.2 Medium -
mcpRubyGems MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood 5.3 Medium -
mcpRubyGems MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection 6.9 Medium -
mcpRubyGems MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay 8.2 High