Product · modelcontextprotocol

io.modelcontextprotocol.sdk:mcp-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2026-108395

Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelconte…

modelcontextprotocol io.modelcontextprotocol.sdk:mcp-core io.modelcontextprotocol.sdk:mcp

Oct 14, 2026