Product by Modelcontextprotocol

    Registry

    5 known vulnerabilities in Registry (Modelcontextprotocol), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Registry (Modelcontextprotocol)
    MediumCVE-2026-44430

    Modelcontextprotocol Registry: Server-Side Request Forgery (SSRF)

    also in 2 other products

    4.0
    MediumCVE-2026-44429

    Modelcontextprotocol Registry: Cross-site Scripting

    also in 2 other products

    5.4
    MediumCVE-2026-44428

    MCP Registry: GitHub OIDC tokens replayable across registry deployments due to shared audience

    also in 2 other products

    4.7
    LowCVE-2026-45781

    Modelcontextprotocol Registry: Failing Open

    also in 1 other product

    3.5
    Not ratedCVE-2026-44427

    MCP Registry: Open Redirect

    also in 1 other product

    —

    All products by Modelcontextprotocol