MP
Product
Mcp Python Sdk
4
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 0Low 0
Watch
Add Mcp Python Sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59950 | 8.1 | Jul 15 | MCP Python SDK: WebSocket server transport does not support Host/Origin validation Affected: before 1.28.1 |
| CVE-2025-66416 | 8.1 | Dec 2 | The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP) Affected: before 1.23.0 |
| CVE-2026-52870 | 7.6 | Jul 15 | MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks Affected: 1.23.0 before 1.27.2 |
| CVE-2026-52869 | 7.1 | Jul 15 | MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal Affected: before 1.27.2 |
Showing 4