Skip to content
OpenAdvisories

Package · crates.io

rmcp

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    GHSA-4432-vg92-fqh6

    Unbounded tool schema cache in Streamable HTTP server transport

    From 3.0.0 until 3.6.0, `StreamableHttpService` cached the result of `ServerHandler::get_tool` in a process-wide map keyed by the tool name of incoming `tools/call` requests. The map had no size limit and no eviction, and it also cached unknown tool names. An…

    rmcp crates.io
  • High 8.2
    CVE-2026-63127

    RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth implementation in crates/rmcp/src/transport/auth.rs omits the RFC 9728 resource field from ResourceServerMetadata and allows discover_oauth_server_via_resource…

    Model Context Protocol rust-sdk rmcp crates.io
  • High 7.5
    CVE-2026-63128

    RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/tower.rs allows an unauthenticated client to send a well-formed JSON-RPC POST tha…

    Model Context Protocol rust-sdk rmcp crates.io
  • High 8.8
    CVE-2026-42559 Public exploit

    RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious publ…

    Model Context Protocol rust-sdk zed nushell Wolfi npm crates.io