Known Vulnerabilities for Python-sdk by Modelcontextprotocol
Listed below are 10 of the newest known vulnerabilities associated with "Python-sdk" by "Modelcontextprotocol".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123859 json | When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality in th... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123660 json | In Vulnerability-Lookup 5.5.1 up to but not including 6.4.1, a signed-in user could make the server allocate memory far out o... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123198 json | LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows ... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-120859 json | PyMoDAQ before 4.4.13, and pymodaq_data, pymodaq_gui, and pymodaq_utils before 5.1.15, 5.2.x before 5.2.14, and 5.3.x before ... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-120499 json | h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary code by s... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-120459 json | python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120338 json | Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subpr... | Not Provided | 2026-11-01 | 2026-11-02 |
| CVE-2026-119979 json | LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allow... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119716 json | pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows te... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-119578 json | MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows attack... | Not Provided | 2026-10-30 | 2026-10-30 |