mcp
RubyGems · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MCP Ruby SDK: Ruby SSE Session Poisoning | mcp | RubyGems | High | Fix reported | |
| MCP Ruby SDK: Unbounded JSON-RPC request body causes uncontrolled memory allocation in StreamableHTTPTransport | mcp | RubyGems | High | Fix reported | |
| MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood | mcp | RubyGems | Medium | Fix reported | |
| MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS) | mcp | RubyGems | Medium | Fix reported | |
| MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection | mcp | RubyGems | Medium | Fix reported | |
| MCP Ruby SDK: Insufficient Session Binding Allows SSE Stream Hijacking via Session ID Replay | mcp | RubyGems | High | Fix reported |