Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

149 matches found

Positive Technologies
Positive Technologies•added 2026/05/20 12:00 a.m.•25 views

PT-2026-42384

MCP Registry: OCI validator skips ownership check on upstream rate limits in github.com/modelcontextprotocol/registry...

3.5CVSS8.4AI score0.00233EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins•added 2026/03/16 11:03 a.m.•16 views

Security Bulletin: IBM Rhapsody Systems Engineering is using @modelcontextprotocol/sdk-1.15.0 which is vulnerable to CVE-2026-0621

Summary A security vulnerability was identified in the @modelcontextprotocol/sdk package used in our product. We have resolved the issue by updating to a non-vulnerable patched version to ensure the continued security and reliability of our application. Vulnerability Details CVEID:CVE-2026-0621...

8.7CVSS5.3AI score0.00438EPSS
SaveExploits1Affected Software1
vulnersOsv
vulnersOsv•added 2026/02/04 9:29 p.m.•4 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2204 more potentially affected by CVE-2026-25536 via @modelcontextprotocol/sdk (>=1.10.0, <=1.25.3)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.1, =0.0.1, =1.0.0, =1.1.0, =1.0.0, =10.1.0-rc.1, =10.2.1 and more Source cves: CVE-2026-25536 Source advisory: MEND:CVE-2026-25536...

7.1CVSS7.1AI score0.00298EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/02/04 8:04 p.m.•11 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2204 more potentially affected by CVE-2026-25536 via @modelcontextprotocol/sdk (>=1.10.0, <=1.25.3)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.1, =0.0.1, =1.0.0, =1.1.0, =1.0.0, =10.1.0-rc.1, =10.2.1 and more Source cves: CVE-2026-25536 Source advisory: OSV:GHSA-345P-7CG4-V4C7...

7.1CVSS7.1AI score0.00298EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/02/04 8:04 p.m.•13 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2204 more potentially affected by CVE-2026-25536 via @modelcontextprotocol/sdk (>=1.10.0, <=1.25.3)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.1, =0.0.1, =1.0.0, =1.1.0, =1.0.0, =10.1.0-rc.1, =10.2.1 and more Source cves: CVE-2026-25536 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-15208843...

7.1CVSS7.1AI score0.00298EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/02/04 8:04 p.m.•3 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2204 more potentially affected by CVE-2026-25536 via @modelcontextprotocol/sdk (>=1.10.0, <=1.25.3)

@modelcontextprotocol/sdk NPM version =1.10.0, =0.3.3, =1.0.0, =1.14.1, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.1, =0.0.1, =1.0.0, =1.1.0, =1.0.0, =10.1.0-rc.1, =10.2.1 and more Source cves: CVE-2026-25536 Source advisory: GHSA-345P-7CG4-V4C7...

7.1CVSS7.1AI score0.00298EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2026/01/05 9:55 p.m.•10 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2064 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)

@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =0.1.0, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.26-beta.1 and more Source cves: CVE-2026-0621 Source advisory: SNYK:JS-MODELCONTEXTPROTOCOLSDK-14871...

8.7CVSS5.4AI score0.00438EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/01/05 9:30 p.m.•11 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2064 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)

@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =0.1.0, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.26-beta.1 and more Source cves: CVE-2026-0621 Source advisory: OSV:GHSA-8R9Q-7V3J-JR4G...

8.7CVSS5.4AI score0.00438EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/01/05 9:30 p.m.•4 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2064 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)

@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =0.1.0, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.26-beta.1 and more Source cves: CVE-2026-0621 Source advisory: GHSA-8R9Q-7V3J-JR4G...

8.7CVSS5.4AI score0.00438EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2026/01/05 8:57 p.m.•4 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2064 more potentially affected by CVE-2026-0621 via @modelcontextprotocol/sdk (>=1.3.0, <=1.25.1)

@modelcontextprotocol/sdk NPM version =1.3.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =0.1.0, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.26-beta.1 and more Source cves: CVE-2026-0621 Source advisory: MEND:CVE-2026-0621...

8.7CVSS5.4AI score0.00438EPSS
SaveExploits1
vulnersOsv
vulnersOsv•added 2025/12/02 6:12 p.m.•4 views

0xgasless-mcp (>=1.0.3, <=1.0.5), 12306-adk-mcp (0.3.4) +6860 more potentially affected by CVE-2025-66414 via @modelcontextprotocol/sdk (>=0.4.0, <=1.23.1)

@modelcontextprotocol/sdk NPM version =0.4.0, =1.0.3, =0.3.3, =1.0.0, =0.1.0, =0.0.1-beta.0, =0.1.0, =1.14.1, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2025-66414 Source advisory: MEND:CVE-2025-66414...

8.1CVSS5.9AI score0.00511EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/12/02 4:51 p.m.•12 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2610 more potentially affected by CVE-2025-66414 via @modelcontextprotocol/sdk (>=1.0.0, <=1.23.1)

@modelcontextprotocol/sdk NPM version =1.0.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =0.1.0, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.26-beta.1 and more Source cves: CVE-2025-66414 Source advisory: OSV:GHSA-W48Q-CV73-MX4W...

8.1CVSS5.9AI score0.00511EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/12/02 4:51 p.m.•11 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2610 more potentially affected by CVE-2025-66414 via @modelcontextprotocol/sdk (>=1.0.0, <=1.23.1)

@modelcontextprotocol/sdk NPM version =1.0.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =0.1.0, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.26-beta.1 and more Source cves: CVE-2025-66414 Source advisory:...

8.1CVSS5.9AI score0.00511EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/12/02 4:51 p.m.•3 views

12306-adk-mcp (0.3.4), 12306-mcp (>=0.3.3, <=0.3.10) +2610 more potentially affected by CVE-2025-66414 via @modelcontextprotocol/sdk (>=1.0.0, <=1.23.1)

@modelcontextprotocol/sdk NPM version =1.0.0, =0.3.3, =1.0.0, =0.1.0, =1.14.1, =0.1.0, =1.0.0, =1.2.1, =0.1.4, =0.4.2, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.1, =0.0.1, =0.0.26-beta.1 and more Source cves: CVE-2025-66414 Source advisory: GHSA-W48Q-CV73-MX4W...

8.1CVSS5.9AI score0.00511EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/09/08 9:24 p.m.•4 views

@arturl/pulumi-mcp-server (0.1.9), @collegue/mcp (>=1.0.1, <=1.0.2) +71 more potentially affected by CVE-2025-58444 via @modelcontextprotocol/inspector (>=0.2.7, <=0.15.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =1.0.1, =2.0.10, =0.0.0-semantically-released, =1.0.1, =0.0.0-alpha.0, =0.1.0, =0.1.0, =2.1.0, =2.1.1 - @iflow-mcp/cliffhall-gooseteam 0.3.0 - @iflow-mcp/dify-mcp-server-ts 1.0.0 - @iflow-mcp/dify-workflow-mcp 1.0.0 and more Source cves:...

8.6CVSS5.8AI score0.00672EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/09/08 9:14 p.m.•7 views

@arturl/pulumi-mcp-server (0.1.9), @collegue/mcp (>=1.0.1, <=1.0.2) +71 more potentially affected by CVE-2025-58444 via @modelcontextprotocol/inspector (>=0.2.7, <=0.15.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =1.0.1, =2.0.10, =0.0.0-semantically-released, =1.0.1, =0.0.0-alpha.0, =0.1.0, =0.1.0, =2.1.0, =2.1.1 - @iflow-mcp/cliffhall-gooseteam 0.3.0 - @iflow-mcp/dify-mcp-server-ts 1.0.0 - @iflow-mcp/dify-workflow-mcp 1.0.0 and more Source cves:...

8.6CVSS5.8AI score0.00672EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/09/08 9:14 p.m.•4 views

@arturl/pulumi-mcp-server (0.1.9), @collegue/mcp (>=1.0.1, <=1.0.2) +71 more potentially affected by CVE-2025-58444 via @modelcontextprotocol/inspector (>=0.2.7, <=0.15.0)

@modelcontextprotocol/inspector NPM version =0.2.7, =1.0.1, =2.0.10, =0.0.0-semantically-released, =1.0.1, =0.0.0-alpha.0, =0.1.0, =0.1.0, =2.1.0, =2.1.1 - @iflow-mcp/cliffhall-gooseteam 0.3.0 - @iflow-mcp/dify-mcp-server-ts 1.0.0 - @iflow-mcp/dify-workflow-mcp 1.0.0 and more Source cves:...

8.6CVSS5.8AI score0.00672EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2025/07/07 12:00 a.m.•8 views

NuGet Package 'ModelContextProtocol' Detection

The remote host has a 'ModelContextProtocol' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

5.8AI score
SaveExploits0References1
vulnersOsv
vulnersOsv•added 2025/07/02 2:41 p.m.•9 views

@flinkhouse/servers (0.6.2), @iflow-mcp/leadfarmer-ai-mcp-server-example (>=1.0.0, <=1.0.2) +11 more potentially affected by CVE-2025-34072 via @modelcontextprotocol/server-slack (2025.4.25)

@modelcontextprotocol/server-slack NPM version 2025.4.25 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-slack and may be impacted: - @flinkhouse/servers 0.6.2 - @iflow-mcp/leadfarmer-ai-mcp-server-example =1.0.0, =1.0.0,...

9.3CVSS7.7AI score0.0043EPSS
SaveExploits0
vulnersOsv
vulnersOsv•added 2025/07/02 2:30 p.m.•4 views

@flinkhouse/servers (0.6.2), @iflow-mcp/alibabacloud-dataworks-mcp-server (1.0.43) +10 more potentially affected by CVE-2025-53109 via @modelcontextprotocol/server-filesystem (>=0.6.2, <=2025.3.28)

@modelcontextprotocol/server-filesystem NPM version =0.6.2, =1.0.0, =0.5.0, =0.6.2, =1.0.40, =1.0.7, =2.0.1, =0.1.7, =0.2.9 Source cves: CVE-2025-53109 Source advisory: MEND:CVE-2025-53109...

7.3CVSS7.5AI score0.00765EPSS
SaveExploits0
Rows per page
Query Builder