Package · Maven

io.modelcontextprotocol.sdk:mcp-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.6

CVE-2026-35568

MCP Java-SDK has a DNS Rebinding Vulnerability

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a v…

Model Context Protocol java-sdk io.modelcontextprotocol.sdk:mcp-core Maven

Apr 7, 2026