Vulnerabilities (CVE)

Filtered by vendor Lfprojects Subscribe
Filtered by product Mcp Java Sdk
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-34237 1 Lfprojects 1 Mcp Java Sdk 2026-04-03 N/A 6.1 MEDIUM
MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 1.0.1 and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 1.0.1 and 1.1.1.