mark3labs mcp-go

• CVE-2026-123272 High 8.0 mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadata 0.2%
• CVE-2026-108859 High 7.5 mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering 0.5%
• CVE-2026-81092 Medium 6.8 mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding 0.2%