Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/30 2:41 p.m.•16 views

MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)

Summary The stdio transports in MCP::Server::Transports::StdioTransport and MCP::Client::Stdio read newline-delimited JSON-RPC frames using IOgets with no limit argument. CRuby's IOgets with no limit reads from the current position until the next separator \n with no upper bound on the returned...

6.2CVSS6.3AI score0.00184EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder