https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:44:42 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-342528 EUVD-2026-342528 https://cve.radiocsirt.org/vuln/euvd-2026-342528 https://cve.radiocsirt.org/vuln/fkie_cve-2026-67432 <p>MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and parses an entire JSON-RPC POST body without a size limit, allowing an unauthenticated remote attacker to exhaust process memory. This issue is fixed in version 0.23.0.</p> <p>MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem reads and parses an entire JSON-RPC POST body without a size limit, allowing an unauthenticated remote attacker to exhaust process memory. This issue is fixed in version 0.23.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-67432 https://cve.radiocsirt.org/vuln/ghsa-h669-8m4g-r2hc <p><strong>Affected:</strong> RubyGems: mcp</p> <p>## Summary</p> <p>An unauthenticated remote attacker can force any MCP Ruby SDK server using `MCP::Server::Transports::StreamableHTTPTransport` to allocate gigabytes of memory by sending a single oversized JSON-RPC POST. The transport reads the entire HTTP body into a Ruby `String` and parses it with `JSON.parse(body, symbolize_names: true)` with no size limit, no `Content-Length` pre-check, and no streaming parser, allowing trivial denial of service against the worker process.</p> <p>## Affected component</p> <p>`lib/mcp/server/transports/streamable_http_transport.rb`, method `handle_post`:</p> <p>- Line 341: `body_string = request.body.read` — reads the full HTTP body into memory with no upper bound. - Lines 531–535: `JSON.parse(body_string, symbolize_names: true)` — fully materialises the parsed object graph; with `symbolize_names: true` every JSON key also allocates a Ruby symbol.</p> <p>The vulnerable path runs **before** session validation, so it is reachable in both the default stateful mode and in `stateless: true` mode, without an `Mcp-Session-Id` header and without any prior authentication.</p> <p>A second instance of the same root cause exists in `lib/mcp/server/transports/stdio_transport.rb:23` (`$stdin.gets` with no `limit:` argument). The practical impact there is limited because the stdio peer is normally a trusted parent process, but the fix should cover both transports.</p> <p>## Proof of concept</p> <p>Both files below are self-contained. Save them anywhere on disk, run the server in one terminal and the…</p> <p><strong>Affected:</strong> RubyGems: mcp</p> <p>## Summary</p> <p>An unauthenticated remote attacker can force any MCP Ruby SDK server using `MCP::Server::Transports::StreamableHTTPTransport` to allocate gigabytes of memory by sending a single oversized JSON-RPC POST. The transport reads the entire HTTP body into a Ruby `String` and parses it with `JSON.parse(body, symbolize_names: true)` with no size limit, no `Content-Length` pre-check, and no streaming parser, allowing trivial denial of service against the worker process.</p> <p>## Affected component</p> <p>`lib/mcp/server/transports/streamable_http_transport.rb`, method `handle_post`:</p> <p>- Line 341: `body_string = request.body.read` — reads the full HTTP body into memory with no upper bound. - Lines 531–535: `JSON.parse(body_string, symbolize_names: true)` — fully materialises the parsed object graph; with `symbolize_names: true` every JSON key also allocates a Ruby symbol.</p> <p>The vulnerable path runs **before** session validation, so it is reachable in both the default stateful mode and in `stateless: true` mode, without an `Mcp-Session-Id` header and without any prior authentication.</p> <p>A second instance of the same root cause exists in `lib/mcp/server/transports/stdio_transport.rb:23` (`$stdin.gets` with no `limit:` argument). The practical impact there is limited because the stdio peer is normally a trusted parent process, but the fix should cover both transports.</p> <p>## Proof of concept</p> <p>Both files below are self-contained. Save them anywhere on disk, run the server in one terminal and the…</p> https://cve.radiocsirt.org/vuln/ghsa-h669-8m4g-r2hc