Vulners
Lucene search
Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default
| Reporter | Title | Published | Views | Family All 30 |
|---|---|---|---|---|
 | Security Bulletin: MCP Python SDK DNS Rebinding Vulnerability in HTTP Servers (Fixed in 1.23.0) affects watsonx.data | 8 Apr 202610:45 | – | ibm |
| Security Bulletin: Vulnerability in MCP Python SDK bundled with IBM Fusion, IBM Fusion HCI and Content-Aware Storage. | 6 May 202610:19 | – | ibm |
 | CVE-2025-66416 vulnerabilities | 6 Dec 202501:29 | – | cgr |
 | CVE-2025-66416 | 27 Dec 202504:21 | – | circl |
 | Model Context Protocol Python SDK 安全漏洞 | 2 Dec 202500:00 | – | cnnvd |
 | CVE-2025-66416 | 2 Dec 202518:14 | – | cve |
 | CVE-2025-66416 DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost | 2 Dec 202518:14 | – | cvelist |
 | EUVD-2025-200273 | 2 Dec 202516:52 | – | euvd |
| EUVD-2025-205459 | 26 Dec 202523:20 | – | euvd |
 | FastMCP updated to MCP 1.23+ due to CVE-2025-66416 | 26 Dec 202523:20 | – | github |
10
Node
mcpRange<1.23.0pip
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Feb 2026 17:53Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.18.1
CVSS 47.6
EPSS0.00445
SSVC