@modelcontextprotocol io.modelcontextprotocol.sdk:mcp

• CVE-2026-108395 High 7.5 Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies 0.6%