Rust Rack Session DoS

The vulnerability of the Rust library for session management in Rack applications is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to cause service failures...

Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport

Summary An unauthenticated remote attacker can force any MCP Ruby SDK server using MCP::Server::Transports::StreamableHTTPTransport to allocate gigabytes of memory by sending a single oversized JSON-RPC POST. The transport reads the entire HTTP body into a Ruby String and parses it with...

EUVD-2025-14808

Malicious code in bioql PyPI...