RU
Product
ruby-sdk
6
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add ruby-sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63118 | 6.9 | Jul 29 | MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection Affected: < 0.23.0 |
| CVE-2026-63119 | 6.2 | Jul 29 | MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS) Affected: < 0.23.0 |
| CVE-2026-33946 | 5.9 | Mar 27 | MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay Affected: < 0.9.2 |
| CVE-2026-67430 | 5.3 | Jul 29 | MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood Affected: < 0.23.0 |
Showing 4