io.modelcontextprotocol.sdk:mcp vulnerabilities

CVEs whose affected-version data names the io.modelcontextprotocol.sdk:mcp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-108395High· 7.5

2w ago

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through …

▾ Twilightmodelcontextprotocol · io.modelcontextprotocol.sdk:mcpEPSS 0.61%via NVD