python-sdk vulnerabilities
CVEs whose affected-version data names the python-sdk package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-109527High· 7.5The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients
The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and…
▾ Twilightmodelcontextprotocol · python-sdkEPSS 0.70%via NVD
CVE-2026-59951Medium· 6.9The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP)
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, including FastMCP, MCPServer, Server.streamable_http_app(), and …
▾ Sunlitmodelcontextprotocol · python-sdkEPSS 0.46%via NVD