RU
Product
rust-sdk
by modelcontextprotocol · last CVE Sep 16, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch

Add rust-sdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42559
8.8
0%
May 14
RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport
Affected: < 1.4.0
CVE-2026-63127
8.2
0%
Sep 16
RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery
Affected: < 2.0.0
CVE-2026-63128
7.5
1%
Sep 16
RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service
Affected: < 2.0.0
Showing 3