Login Request a demo
PY
Product
python-sdk
by modelcontextprotocol · last CVE Oct 27, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
5
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add python-sdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59951
6.9
0%
Oct 14
MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion
Affected: >= 1.8.0, < 1.30.0; >= 2.0.0, < 2.2.0
CVE-2026-116684
New
6.8–Oct 27
Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
Affected: >= 1.10.0, < 1.30.0; >= 2.0.0, < 2.2.0
CVE-2026-116686
New
6.5–Oct 27
Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
Affected: >= 1.10.0, < 1.30.0; >= 2.0.0, < 2.2.0
CVE-2026-116685
New
5.9–Oct 27
Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
Affected: >= 1.8.0, < 1.30.0; >= 2.0.0, < 2.2.0
Showing 4