Vulnerabilities for mcp

First version without a known vulnerability: 2.0.0a1

Details

• GHSA-vj7q-gjh5-988w2026-07-16

  MCP Python SDK: WebSocket server transport does not support Host/Origin validation

  Fixed in: 1.28.1

• GHSA-jpw9-pfvf-9f582026-07-16

  MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

  Fixed in: 1.27.2

• GHSA-hvrp-rf83-w7752026-07-16

  MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

  Fixed in: 1.27.2

• GHSA-9h52-p55h-vw2f2025-12-02

  Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

  Fixed in: 1.23.0

• GHSA-3qhf-m339-9g5v2025-07-04

  MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

  Fixed in: 1.9.4

• GHSA-j975-95f5-7wqh2025-07-04

  MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service

  Fixed in: 1.10.0