Known Vulnerabilities for Python-sdk by Modelcontextprotocol
Listed below are 10 of the newest known vulnerabilities associated with "Python-sdk" by "Modelcontextprotocol".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-71870 json | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption wh... | Not Provided | 2026-08-07 | 2026-08-07 |
| CVE-2026-71852 json | pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and large mem... | Not Provided | 2026-08-07 | 2026-08-07 |
| CVE-2026-71554 json | h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions up to and including 4.4.0 accept request header block... | Not Provided | 2026-08-06 | 2026-08-08 |
| CVE-2026-71284 json | Fledge's backup-restore upload handler, upload_backup() (python/fledge/services/core/api/backup_restore.py), takes the first ... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71283 json | Fledge's backup-restore upload handler, upload_backup() (python/fledge/services/core/api/backup_restore.py), calls tarfile.ex... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71259 json | ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url() validator in esphome/config_validation.py: `... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-70493 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, the built-in k... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-70491 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlier, the GET /api/v1/... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-70477 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, a prompt injection s... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-70470 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePyth... | Not Provided | 2026-08-04 | 2026-08-04 |