rmcp
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport | dynoxide-rsrmcp | Rust / Cargonpm | High | Fix reported | |
| rmcp OAuth client fetches server-controlled resource_metadata URLs | rmcp | Rust / Cargo | Medium | Fix reported | |
| RMCP: Custom HTTP headers leak to cross-origin redirect targets | rmcpRed Hat Enterprise Linux 10/goose | Rust / CargoRed Hat | Medium | Fix reported | |
| RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service | rmcpRed Hat Enterprise Linux 10/goose | Rust / CargoRed Hat | High | Fix reported | |
| RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery | rmcpRed Hat Enterprise Linux 10/goose | Rust / CargoRed Hat | High | Fix reported |