Products: 15
Vulnerabilities: 41
Known Exploited: 0
1
Critical Level Threats
21
High Level Threats
14
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-111770
Model Context Protocol TypeScript SDK: Shared transport or server instances delivered one HTTP client's messages to another
Last Modified: Nov 05, 2026
Published: Nov 05, 2026
CVE-2026-116686
Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
Last Modified: Oct 28, 2026
Published: Oct 27, 2026
CVE-2026-116685
Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
Last Modified: Oct 30, 2026
Published: Oct 27, 2026
CVE-2026-116684
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
Last Modified: Nov 02, 2026
Published: Oct 27, 2026
CVE-2026-111767
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
Last Modified: Oct 20, 2026
Published: Oct 20, 2026
Items Per Page
