CVE-2026-63119

The CVE affects the MCP Ruby SDK (mcp gem), specifically MCP::Server::Transports::StdioTransport and MCP::Client::Stdio. The vulnerability arises from using IO#gets without a byte limit, allowing an attacker to send data without a newline and trigger unbounded line buffering, causing memory exhau...

MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing

Impact What kind of vulnerability is it? Who is impacted? MinIO's S3 Select feature is vulnerable to memory exhaustion when processing CSV files containing lines longer than available memory. The CSV reader's nextSplit function calls bufio.Reader.ReadBytes'\n' with no size limit, buffering the...