@modelcontextprotocol io.modelcontextprotocol.sdk:mcp-core

• CVE-2026-108395 High 7.5 Model Context Protocol Java SDK HTTP server transports allow memory exhaustion through unbounded request bodies 0.6%