MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS

概要

参考情報

• modelcontextprotocol/python-sdk security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-53366 · ADVISORY
• modelcontextprotocol/python-sdk#822 · WEB
• modelcontextprotocol/python-sdk commit 29c69e6 · WEB
• GitHub Advisory GHSA-3qhf-m339-9g5v · ADVISORY
• modelcontextprotocol/python-sdk · PACKAGE
• modelcontextprotocol/python-sdk release v1.9.4 · WEB
• pypa/advisory-database · WEB
• pypi.org/project/mcp · WEB

mcp のその他の脆弱性

• CVE-2026-116686中 6.5The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 an…
• CVE-2026-116685中 5.9The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.8.0 until 1.30.0 and…
• CVE-2026-116684中 6.8The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.10.0 until 1.30.0 an…
• CVE-2026-59951中 6.9The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, s…
• CVE-2026-59950高 8.1The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.…