Mark3labs Mcp-Go
2 CVEs affecting Mark3labs Mcp-Go. Latest disclosed: 2026-10-11. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-108859 | High | 7.5 | 2026-10-11 | mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memor… |
CVE-2026-81092 | Medium | 6.8 | 2026-08-27 | mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamable_http.go and SSEServer.Ser… |