What’s Vulnerable › Products

modelcontextprotocol io.modelcontextprotocol.sdk:mcp vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your modelcontextprotocol io.modelcontextprotocol.sdk:mcp version is affected

Latest modelcontextprotocol io.modelcontextprotocol.sdk:mcp vulnerabilities

• CVE-2026-108395 — Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies (CVSS 7.5)