Lucene search
+L

27 matches found

OSV
OSV
•added 2025/07/04 10:05 p.m.•12 views

CVE-2025-53366 MCP SDK Vulnerable to FastMCP Server Validation Error, Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability 500 errors until manually...

8.7CVSS6.6AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/07/04 10:03 p.m.•37 views

CVE-2025-53365 MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing...

8.7CVSS0.00419EPSS
SaveExploits0References3
CVE
CVE
•added 2025/07/04 10:03 p.m.•73 views

CVE-2025-53365

The MCP Python SDK (package name mcp) has a CVE-2025-53365 issue affecting versions prior to 1.10.0. If a client deliberately triggers an exception after establishing a streamable HTTP session, the server can emit an uncaught ClosedResourceError, potentially crashing the server and requiring a re...

8.7CVSS6.4AI score0.00419EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/07/04 10:03 p.m.•31 views

CVE-2025-53365 MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing...

8.7CVSS7.1AI score0.00419EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/07/04 12:00 a.m.•25 views

PT-2025-28026

Name of the Vulnerable Software and Affected Versions: MCP Python SDK versions prior to 1.10.0 Description: The issue arises when a client deliberately triggers an exception after establishing a streamable HTTP session, leading to an uncaught ClosedResourceError on the server side. This can cause...

8.7CVSS5.2AI score0.00419EPSS
SaveExploits0References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•1 views

CVE-2025-53365: Uncaught Exception

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing...

8.7CVSS5.8AI score0.00419EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/04 12:00 a.m.•14 views

PT-2025-28027

Name of the Vulnerable Software and Affected Versions: MCP Python SDK versions prior to 1.9.4 Description: A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability until manually restarted. The impact may vary...

8.7CVSS5.2AI score0.09309EPSS
SaveExploits0References19
Rows per page
Query Builder