Skip to content
OpenAdvisories

Product · modelcontextprotocol

java-sdk

2 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-35568

    MCP Java-SDK has a DNS Rebinding Vulnerability

    MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allows an attacker to access a locally or network-private java-sdk MCP server via a v…

    modelcontextprotocol java-sdk io.modelcontextprotocol.sdk:mcp-core Maven