CVE-2026-108395 Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from...

CVE-2026-108395

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from...

CVE-2026-108395 Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from...

CVE-2026-108395

The Model Context Protocol Java SDK is vulnerable to memory exhaustion due to unbounded request bodies in certain server transports. Specifically, the Servlet-based SSE , Streamable HTTP , and Stateless server transports fail to enforce a maximum size when reading HTTP request bodies into memory....

CVE-2026-108395 Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies

The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mcp artifact, from 0.13.0 through 0.18.3 and 1.0.0 through 1.1.3 in io.modelcontextprotocol.sdk:mcp-core, and from...

Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.

Summary Multiple Vulnerabilities were addressed in IBM Decision Optimization for Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-70906 DESCRIPTION: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.327 Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with...

CVE-2026-73792

A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow...

CVE-2026-73792

A security vulnerability exists in HPE NonStop Java JToolkit (T2716) that could allow command injection and buffer overflow . Affected versions include T2716L11^ABS and earlier. The vulnerability has a CVSS 3.1 base score of 3.8, with a local attack vector and high complexity. HPE has released a ...

CVE-2026-73792 HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability

A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow...

EUVD-2026-100947

A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow...

CVE-2026-73792 HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability

A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow...

CLSA-2026-1791965654 TuxCare security update for com.google.protobuf:protobuf-java (1 CVE)

TuxCare rebuilt com.google.protobuf:protobuf-java to address 1 CVE. Fixed in 2.5.0-tuxcare.2...

CLSA-2026-1791960535 TuxCare security update for com.google.protobuf:protobuf-java (1 CVE)

TuxCare rebuilt com.google.protobuf:protobuf-java to address 1 CVE. Fixed in 2.6.1-tuxcare.2...

RLSA-2026:82013 Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

libreoffice security update

An update is available for libreoffice. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibreOffice is an open source, community-developed office productivity...

Resource Exhaustion

Apache Thrift is vulnerable to Resource Exhaustion. The vulnerability is due to improper handling of exceptional conditions and allocation of resources without limits or throttling, where an uncaught exception in the Java bindings can cause unbounded resource consumption and allow attackers to...

Resource Exhaustion

Apache Thrift is vulnerable to resource exhaustion. The vulnerability is due to unbounded allocation of resources without proper throttling, where the Java bindings perform resource allocation without limits and attackers can trigger excessive resource consumption to cause denial of service...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring

Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.5 Vulnerability Details CVEID:CVE-2016-1000027 DESCRIPTION: Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution RCE issue if used for Java deserialization of untrusted data...

CLEANSTART-2026-SQ97445 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security...