Modelcontextprotocol Java-sdk vulnerabilities

• lfprojects mcp java sdk, modelcontextprotocol java-sdk +1 more MCP Java-SDK has a DNS Rebinding Vulnerability CVE-2026-35568 Fix available 7.6 HighApril 7, 2026
• lfprojects mcp java sdk, modelcontextprotocol java-sdk +1 more MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *) CVE-2026-34237 Fix available 6.1 MediumMarch 30, 2026