Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

8 matching records.

1. 26
   CVE NVD 24h ago

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol.

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 2.0.0 until 2.3.0 in @modelcontextprotocol/server, applications that shared one stateless HTTP…

   CVSS 7.7 Fix available CVE-2026-111770 Modelcontextprotocol @Modelcontextprotocol Developer platform
2. 26
   CVE NVD 24h ago

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol.

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.3.0 until 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in…

   CVSS 7.5 Fix available CVE-2026-111768 Modelcontextprotocol @Modelcontextprotocol Developer platform
3. 19
   CVE NVD 24h ago

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol.

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. Prior to 1.32.0 in @modelcontextprotocol/sdk and from 2.0.0 until 2.3.0 in…

   CVSS 6.5 Fix available CVE-2026-111769 Modelcontextprotocol @Modelcontextprotocol Developer platform
4. 19
   CVE NVD 25h ago

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol.

   The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. From 1.6.0 until 1.32.0 in @modelcontextprotocol/sdk, from 2.0.0 until 2.3.0 in…

   CVSS 6.8 Fix available CVE-2026-111771 Modelcontextprotocol @Modelcontextprotocol Developer platform
5. 15
   CVE NVD 8d ago

   open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on…

   open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafted URLs on Windows and WSL. Attackers can embed $(...) subexpressions in URLs, such as…

   CVSS 7.5 CVE-2026-119025 Sindresorhus Modelcontextprotocol AI infrastructure
6. 13
   CVE NVD 10d ago

   The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients.

   The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate…

   CVSS 6.5 Fix available CVE-2026-116686 Modelcontextprotocol AI infrastructure
7. 13
   CVE NVD 10d ago

   The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients.

   The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamable_http_client, streamablehttp_client, sse_client, ClientSessionGroup…

   CVSS 5.9 Fix available CVE-2026-116685 Modelcontextprotocol AI infrastructure
8. 13
   CVE NVD 10d ago

   The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients.

   The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with…

   CVSS 6.8 Fix available CVE-2026-116684 Modelcontextprotocol AI infrastructure

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Modelcontextprotocol&limit=100. RSS for this section: feed.xml.