ROOT-APP-PYPI-CVE-2025-53365 CVE-2025-53365 in mcp - Patched by Root

Root has patched CVE-2025-53365 in the mcp package for Root:PyPI. Multiple fixed versions available...

astra-assistants (>=2.3.0, <=2.4.5), fiftyone-mcp-server (>=0.1.0, <=0.1.2) +7 more potentially affected by CVE-2025-53365 via mcp (0.9.1)

mcp PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mcp and may be impacted: - astra-assistants =2.3.0, =0.1.0, =3.0.16, =0.0.4, =1.0.26, =1.0.35 Source cves: CVE-2025-53365 Source advisory: OSV:PYSEC-2026-1618...

OESA-2026-1151 python-mcp security update

The official Python SDK for Model Context Protocol servers and clients Security Fixes: The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP...

CVE-2025-53365

creationtimestamp| type| source ---|---|--- 2025-07-05 01:38:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt6mqf23372i 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2026-03-...

CVE-2025-53365

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing...

CVE-2025-53365

The MCP Python SDK (package name mcp) has a CVE-2025-53365 issue affecting versions prior to 1.10.0. If a client deliberately triggers an exception after establishing a streamable HTTP session, the server can emit an uncaught ClosedResourceError, potentially crashing the server and requiring a re...

CVE-2025-53365 MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing...

academia-mcp (>=0.0.2, <=0.0.4), ada-agentic (0.1.0) +320 more potentially affected by CVE-2025-53365 via mcp (>=0.9.1, <=1.9.4)

mcp PYPI version =0.9.1, =0.0.2, =0.2.0, =0.1.0, =0.1.0, =0.1.3, =0.4.7, =0.4.7, =4.0.0.dev12, =0.0.1, =0.1.0b5, =0.1.1, =0.3.0 and more Source cves: CVE-2025-53365 Source advisory: MEND:CVE-2025-53365...

CVE-2025-53365 MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing...