mcp_java_sdk vulnerabilities

CVEs whose affected-version data names the mcp_java_sdk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-34237Medium· 6.1

5mo ago

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 0.83.0, 1.0.1, an…

▾ Sunlitlfprojects · mcp_java_sdkEPSS 0.22%via NVD