https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:09:59 +0000 https://cve.radiocsirt.org/vuln/cve-2026-42559 <p><strong>Affected:</strong> modelcontextprotocol rust-sdk</p> <p>RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate&#39;s Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious public website, via a DNS rebinding attack, to send authenticated requests to an MCP server running on the victim&#39;s loopback or private-network interface. This vulnerability is fixed in 1.4.0.</p> <p><strong>Affected:</strong> modelcontextprotocol rust-sdk</p> <p>RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate&#39;s Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious public website, via a DNS rebinding attack, to send authenticated requests to an MCP server running on the victim&#39;s loopback or private-network interface. This vulnerability is fixed in 1.4.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-42559