12 matches found
Missing Authorization
Overview mcp is a Model Context Protocol SDK Affected versions of this package are vulnerable to Missing Authorization in the default tasks/list, tasks/get, tasks/result, and tasks/cancel handlers installed by server.experimental.enabletasks, which act on a task by its identifier without checking...
7.6CVSS5.3AI score0.00388EPSS
SaveExploits0References2
20