PT-2026-90533

Name of the Vulnerable Software and Affected Versions MySQL MCP Server versions prior to 0.4.2 Description When the MCP TRANSPORT variable is set to sse, the server constructs SseServerTransport without security settings or DNS-rebinding protection. This configuration leaves the Starlette...