216 matches found
CVE-2026-1777: Cleartext Transmission of Sensitive Information
The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function. A third party with permissions to both call this API and permissions to modify objects in the Training Jobs S3 output...
PT-2026-5708
Name of the Vulnerable Software and Affected Versions Amazon SageMaker Python SDK versions prior to 3.2.0 Amazon SageMaker Python SDK versions prior to 2.256.0 Description The Amazon SageMaker Python SDK contains the ModelBuilder HMAC signing key in cleartext within the response elements of the...
CVE-2026-1778: Improper Certificate Validation
Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for requests with invalid and self-signed certificates to succeed...
OESA-2026-1151 python-mcp security update
The official Python SDK for Model Context Protocol servers and clients Security Fixes: The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP...
GHSA-XQRQ-4MGF-FF32 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk...
CVE-2025-66416
CVE-2025-66416 affects the MCP Python SDK (PyPI package mcp) prior to 1.23.0. It does not enable DNS rebinding protection by default for HTTP-based MCP servers. When run on localhost without authentication (e.g., with FastMCP, streamable HTTP or SSE transport) and without TransportSecuritySetting...
CVE-2025-66416 DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost
The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. Prior to version 1.23.0, tThe Model Context Protocol MCP Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost...
EUVD-2025-200273
Model Context Protocol MCP Python SDK does not enable DNS rebinding protection by default...
Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default
Description The Model Context Protocol MCP Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication using FastMCP with streamable HTTP or SSE transport, and has not configured...
PT-2025-48747
Name of the Vulnerable Software and Affected Versions mcp versions prior to 1.23.0 Description The mcp Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. If an HTTP-based MCP server is running on localhost without authentication, using FastMCP with streamable...
Model Context Protocol Python SDK 安全漏洞
Model Context Protocol Python SDK is a Model Context Protocol open source development tool for Model Context Protocol servers and clients. A security vulnerability exists in the Model Context Protocol Python SDK prior to version 1.23.0, which stems from the fact that DNS rebinding protection is n...
EUVD-2011-4154
Malware in sbrugna...
EUVD-2011-4155
Malware in sbrugna...
EUVD-2011-4153
Malware in sbrugna...
EUVD-2011-1371
Malware in sbrugna...
EUVD-2012-3484
Malware in sbrugna...
EUVD-2025-20094
Malicious code in bioql PyPI...
EUVD-2024-1498
Malicious code in bioql PyPI...