mcp
PyPI10 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting mcppage 1 of 1
- CVE-2025-53365HIGHCVSS 8.7EG 8.7fixed in 1.10.02025-07-04
vulnerable: 0.9.1 ... 1.9.4 (24 versions)
The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead t…
- CVE-2025-53366HIGHCVSS 8.7EG 8.7fixed in 1.9.42025-07-04
vulnerable: 0.9.1 ... 1.9.3 (23 versions)
The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, result…
- CVE-2025-66416HIGHCVSS 8.1EG 8.1fixed in 1.23.02025-12-02
vulnerable: 0.9.1 ... 1.9.4 (46 versions)
The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.23.0, tThe Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default for HTTP-ba…
- CVE-2026-116684MEDIUMCVSS 6.8EG 6.8fixed in 2.2.0 or 1.30.0, by version range2026-10-27
vulnerable: 2.0.0, 2.0.1, 2.1.0, 2.1.1
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, server-side bearer authentication configured through AuthSettings with token_verifier acce…
- CVE-2026-116685MEDIUMCVSS 5.9EG 5.9fixed in 2.2.0 or 1.30.0, by version range2026-10-27
vulnerable: 2.0.0, 2.0.1, 2.1.0, 2.1.1
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and 2.2.0, streamable_http_client, streamablehttp_client, sse_client, ClientSessionGroup, OAuth, and c…
- CVE-2026-116686MEDIUMCVSS 6.5EG 6.5fixed in 2.2.0 or 1.30.0, by version range2026-10-27
vulnerable: 2.0.0, 2.0.1, 2.1.0, 2.1.1
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 and 2.2.0, ClientSession, ClientSessionGroup, and Client tool calls validate server-declared outputSc…
- CVE-2026-52869HIGHCVSS 7.1EG 7.1fixed in 1.27.22026-07-15
vulnerable: 0.9.1 ... 1.9.4 (55 versions)
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server.sse.SseServerTransport and mcp.server.streamable_http_manag…
- CVE-2026-52870HIGHCVSS 7.6EG 7.6fixed in 1.27.22026-07-15
vulnerable: 1.23.0 ... 1.27.1 (9 versions)
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers installed by server.experimental.enable_tasks() for tasks/list, tasks/get, tasks/result, and…
- CVE-2026-59950HIGHCVSS 8.1EG 8.1fixed in 1.28.12026-07-15
vulnerable: 0.9.1 ... 1.9.4 (57 versions)
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.websocket.websocket_server transport accepted WebSocket handshakes without applying Host or …
- CVE-2026-59951HIGHCVSS 6.9EG 7.5fixed in 1.30.0 or 2.2.0, by version range2026-10-14
vulnerable: 1.10.0 ... 1.9.4 (43 versions)
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, including FastMCP, MCPServer, Server.streamable_http_app(), and St…
Check whether mcp is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for mcp CVEs against the assets you own.
Book a Demo →