Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:31:32 +0000 CVE-2025-53365 — MCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of Service https://db.gcve.eu/vuln/cve-2025-53365 <p><strong>Affected:</strong> modelcontextprotocol python-sdk</p> <p>The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.10.0 contains a patch for the issue.</p> <p><strong>Affected:</strong> modelcontextprotocol python-sdk</p> <p>The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.10.0 contains a patch for the issue.</p> https://db.gcve.eu/vuln/cve-2025-53365 GHSA-j975-95f5-7wqh — MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service https://db.gcve.eu/vuln/ghsa-j975-95f5-7wqh <p><strong>Affected:</strong> PyPI: mcp</p> <p>If a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.</p> <p>Thank you to Rich Harang for reporting this issue.</p> <p><strong>Affected:</strong> PyPI: mcp</p> <p>If a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.</p> <p>Thank you to Rich Harang for reporting this issue.</p> https://db.gcve.eu/vuln/ghsa-j975-95f5-7wqh PYSEC-2026-1618 — MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service https://db.gcve.eu/vuln/pysec-2026-1618 <p><strong>Affected:</strong> PyPI: mcp</p> <p>If a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.</p> <p>Thank you to Rich Harang for reporting this issue.</p> <p><strong>Affected:</strong> PyPI: mcp</p> <p>If a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures.</p> <p>Thank you to Rich Harang for reporting this issue.</p> https://db.gcve.eu/vuln/pysec-2026-1618