@modelcontextprotocol java-sdk

• CVE-2026-35568 High 7.6 MCP Java-SDK has a DNS Rebinding Vulnerability 0.1%
• CVE-2026-34237 Medium 6.1 MCP Java SDK has a Hardcoded Wildcard CORS (Access-Control-Allow-Origin: *) 0.2%