Vulnerabilities in MCP & tool servers
Model Context Protocol SDKs, servers and transports. 14 currently disclosed, newest first. Each links through to the merged record for that CVE.
- 6.1 DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite.
- 7.5 @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEY
- 8.2 mcp-sanitizer: URL sanitizer allows localhost/IPv6 loopback SSRF bypass via explicit port or bracketed IPv6
- 7.5 mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths
- 6.8 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
- 5.9 Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
- 6.5 Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
- 7.5 MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length
- 2.1 A vulnerability has been found in continuedev Continue 2.0.0.
- 6.8 FastMCP: Post-transform component authorization is skipped on direct calls
- 5.9 FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
- 7.5 @rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function
- 7.5 @justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
- 7.5 @rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function
Open this in the live dashboard
to filter further, or query it with search_cves over MCP.