Product · modelcontextprotocol

io.modelcontextprotocol:kotlin-sdk-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.2

CVE-2026-53937

MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)

MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, `ReadBuffer.append` in `kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt` writes…

modelcontextprotocol io.modelcontextprotocol:kotlin-sdk-client io.modelcontextprotocol:kotlin-sdk-server io.modelcontextprotocol:kotlin-sdk

Sep 8, 2026