What’s Vulnerable › Products

mark3labs mcp-go vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your mark3labs mcp-go version is affected

Latest mark3labs mcp-go vulnerabilities

• CVE-2026-108859 — mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering (CVSS 7.5)
• CVE-2026-81092 — mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding (CVSS 6.8)