https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:22:10.058556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00094 bdu:2026-00094 2026-10-04T02:22:10.280028+00:00 bdu:2026-00094 https://cve.radiocsirt.org/vuln/brew-cycode-cve-2025-53366 BREW-cycode-CVE-2025-53366 — MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS 2026-10-04T02:22:10.280066+00:00

Affected: Homebrew: cycode

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.

Thank you to Rich Harang for reporting this issue.

 https://cve.radiocsirt.org/vuln/euvd-2026-246640 EUVD-2026-246640 2026-10-04T02:22:10.280103+00:00 EUVD-2026-246640 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53366 fkie_cve-2025-53366 2026-10-04T02:22:10.280118+00:00

The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.9.4 contains a patch for the issue.

 https://cve.radiocsirt.org/vuln/ghsa-3qhf-m339-9g5v GHSA-3qhf-m339-9g5v — MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS 2026-10-04T02:22:10.280144+00:00

Affected: PyPI: mcp

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.

Thank you to Rich Harang for reporting this issue.

 https://cve.radiocsirt.org/vuln/oesa-2026-1151 OESA-2026-1151 — python-mcp security update 2026-10-04T02:22:10.280167+00:00

Affected: openEuler:24.03-LTS-SP3: python-mcp

The official Python SDK for Model Context Protocol servers and clients Security Fix(es):

The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.10.0 contains a patch for the issue.(CVE-2025-53365)

The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.9.4, a validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.9.4 contains a patch for the issue.(CVE-2025-53366)

 https://cve.radiocsirt.org/vuln/pysec-2026-1616 PYSEC-2026-1616 — MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS 2026-10-04T02:22:10.280196+00:00

Affected: PyPI: mcp

A validation error in the MCP SDK can cause an unhandled exception when processing malformed requests, resulting in service unavailability (500 errors) until manually restarted. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.

Thank you to Rich Harang for reporting this issue.