{"items":[{"id":"CVE-2026-116686","published":"2026-10-27T19:29:16.001Z","updated":"2026-10-28T16:13:45.473Z","title":"Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas","severity":"MEDIUM","score":6.5,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2026-116685","published":"2026-10-27T19:26:46.926Z","updated":"2026-10-30T15:03:50.436Z","title":"Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies","severity":"MEDIUM","score":5.9,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2026-116684","published":"2026-10-27T19:12:24.255Z","updated":"2026-11-02T19:40:02.808Z","title":"Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server","severity":"MEDIUM","score":6.8,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2026-109527","published":"2026-10-14T17:52:35.943Z","updated":"2026-10-20T01:46:47.584Z","title":"Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies","severity":"HIGH","score":7.5,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.007,"kevAdded":null},{"id":"CVE-2026-59951","published":"2026-10-14T16:22:31.653Z","updated":"2026-10-15T15:07:43.737Z","title":"MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion","severity":"MEDIUM","score":6.9,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2026-59950","published":"2026-07-15T20:08:54.095Z","updated":"2026-07-17T12:28:19.431Z","title":"MCP Python SDK: WebSocket server transport does not support Host/Origin validation","severity":"HIGH","score":7.6,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2026-52870","published":"2026-07-15T20:07:53.500Z","updated":"2026-07-16T13:01:40.089Z","title":"MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks","severity":"HIGH","score":7.6,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2026-52869","published":"2026-07-15T20:06:23.604Z","updated":"2026-07-16T13:00:37.854Z","title":"MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal","severity":"HIGH","score":7.1,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00535,"kevAdded":null},{"id":"CVE-2025-66416","published":"2025-12-02T18:14:28.310Z","updated":"2025-12-02T18:45:53.656Z","title":"DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost","severity":"HIGH","score":7.6,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2025-53366","published":"2025-07-04T22:05:02.975Z","updated":"2025-07-08T13:52:28.447Z","title":"MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service","severity":"HIGH","score":8.7,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.09754,"kevAdded":null},{"id":"CVE-2025-53365","published":"2025-07-04T22:03:46.893Z","updated":"2025-07-08T13:53:36.518Z","title":"MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service","severity":"HIGH","score":8.7,"vendor":"modelcontextprotocol","product":"python-sdk","kev":false,"epss":0.00419,"kevAdded":null}]}