mark3labs

Products

ProductCVEsExploitedLatest
mcp-go3–Nov 5, 2026

Exploited and recent CVEs

  • CVE-2026-123272 High 8.0 mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata 0.2%
  • CVE-2026-108859 High 7.5 mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering 0.5%
  • CVE-2026-81092 Medium 6.8 mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding 0.2%