Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Lfprojects
Mcp Ruby Sdk
Lfprojects Mcp Ruby Sdk vulnerabilities
lfprojects
mcp ruby sdk
,
modelcontextprotocol
ruby-sdk
+1 more
MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay
CVE-2026-33946
Fix available
8.2
High
March 27, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open