JA
Product
java-sdk
by modelcontextprotocol · last CVE Apr 7, 2026
2
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add java-sdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34237
6.1
0%
Mar 31
MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *)
Affected: >= 1.0.0, < 1.0.1; >= 1.1.0, < 1.1.1; < 0.18.3
CVE-2026-35568
5.7
0%
Apr 7
MCP Java-SDK has a DNS Rebinding Vulnerability
Affected: < 1.0.0
Showing 2