Product by Modelcontextprotocol

    Python-sdk

    11 known vulnerabilities in Python-sdk (Modelcontextprotocol), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Python-sdk (Modelcontextprotocol)
    HighCVE-2025-53366

    MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

    		—
    HighCVE-2026-109527

    Modelcontextprotocol Python-sdk: Allocation of Resources Without Limits or Throttling

    		7.5
    MediumCVE-2026-59951

    Modelcontextprotocol Python-sdk: Missing Release of Resource after Effective Lifetime

    		—
    HighCVE-2026-52869

    MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

    also in 1 other product

    		7.1
    MediumCVE-2026-116685

    Modelcontextprotocol Python-sdk: Exposure of Sensitive Information to an Unauthorized Actor

    		5.9
    MediumCVE-2026-116686

    Modelcontextprotocol Python-sdk: Server-Side Request Forgery (SSRF)

    		6.5
    HighCVE-2025-66416

    Modelcontextprotocol Python-sdk: Initialization of a Resource with an Insecure Default

    also in 1 other product

    		8.1
    HighCVE-2026-52870

    Modelcontextprotocol Python-sdk: Missing Authorization

    also in 1 other product

    		7.6
    MediumCVE-2026-116684

    Modelcontextprotocol Python-sdk: Incorrect Authorization

    		6.8
    HighCVE-2025-53365

    MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service

    		—
    HighCVE-2026-59950

    MCP Python SDK: WebSocket server transport does not support Host/Origin validation

    also in 1 other product

    		8.1

    All products by Modelcontextprotocol