rmcp vulnerabilities
CVEs whose affected-version data names the rmcp package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-c9xm-49cp-xcr9Mediumrmcp OAuth client fetches server-controlled resource_metadata URLs
rmcp OAuth client fetches server-controlled resource_metadata URLs
▾ Sunlitrmcp · rmcpvia OSV
CVE-2026-42559High· 8.8PoCDNS rebinding vulnerability in rmcp Streamable HTTP server transport
DNS rebinding vulnerability in rmcp Streamable HTTP server transport
▾ Midnightrmcp · rmcpEPSS 0.27%via OSV