Skip to content
OpenAdvisories

Product · modelcontextprotocol

kotlin-sdk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-108714

    MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

    MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame h…

    modelcontextprotocol kotlin-sdk