Vendor
modelcontextprotocol
53 known vulnerabilities.
Products
python-sdk 11
typescript-sdk 8
ruby-sdk 6
servers 6
registry 5
rust-sdk 4
inspector 3
server 3
sdk 3
go-sdk 3
java-sdk 2
kotlin-sdk 1
mcp-server-fetch 1
mcp-server-everything 1
io.modelcontextprotocol:kotlin-sdk 1
io.modelcontextprotocol:kotlin-sdk-client 1
io.modelcontextprotocol:kotlin-sdk-core 1
io.modelcontextprotocol:kotlin-sdk-server 1
php-sdk 1
io.modelcontextprotocol.sdk:mcp 1
io.modelcontextprotocol.sdk:mcp-core 1
client 1
express 1
server-legacy 1
1 result · Clear filters · Feed
-
Critical 9.4
MCP Inspector proxy server lacks authentication between the Inspector client and proxy
The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests…