Product by Modelcontextprotocol
Server
3 known vulnerabilities in Server (Modelcontextprotocol), 0 of them actively exploited (CISA KEV).
Key figures
3
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-111771 | MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service | 6.8 | |
| High | CVE-2026-111770 | @modelcontextprotocol Server: Race Condition | 7.7 | |
| High | CVE-2026-111768 | @modelcontextprotocol Server: Allocation of Resources Without Limits or Throttling | 7.5 |