Aller au contenu
6.1 Moyenne

CVE-2026-34237 MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients

Description

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 0.83.0, 1.0.1, and 1.1.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
java-sdk 1.1 1.1.0 → < 1.1.1 1.1.1
java-sdk 1.0 1.0.0 → < 1.0.1 1.0.1
java-sdk 0.18 premières → < 0.18.3 0.18.3
Les 2 CVE de java-sdk →
Suivre cette CVE