CVE-2026-108395

A flaw was found in the Model Context Protocol MCP Java SDK, which can lead to a Denial of Service DoS. The server transports read incoming HTTP request bodies directly into memory without enforcing a maximum size limit. An unauthenticated remote attacker can exploit this vulnerability by sending...