Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/26 10:20 p.m.17 views

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity

The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing. Go's standard library performs case-insensitive matching of JSON keys to struct field tags — a field tagged json:"method" would also match "Method", "METHOD", etc. Additionally, Go's standard...

7.5CVSS5.4AI score0.00255EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder