PY
Product
python-sdk
8
CVEs
0
On KEV
8.1
Max CVSS
5
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add python-sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59950 | 8.1 | Jul 15 | MCP Python SDK: WebSocket server transport does not support Host/Origin validation Affected: < 1.28.1 |
| CVE-2026-52870 | 7.6 | Jul 15 | MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks Affected: >= 1.23.0, < 1.27.2 |
| CVE-2026-109527 | 7.5 | Oct 14 | Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies Affected: < 1.29.1; >= 2.0.0a1, < 2.1.0 |
| CVE-2026-52869 | 7.1 | Jul 15 | MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal Affected: < 1.27.2 |
Showing 4