How many lfprojects mcp python sdk CVEs are in CISA KEV?

None of lfprojects mcp python sdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of lfprojects mcp python sdk are affected?

7 distinct lfprojects mcp python sdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in lfprojects mcp python sdk CVEs?

lfprojects mcp python sdk's CVEs most often map to these CWE weakness types: CWE-1188 (Initialization of a Resource with an Insecure Default), CWE-346 (Origin Validation Error), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).

What is the average severity of lfprojects mcp python sdk CVEs?

The average CVSS base score across lfprojects mcp python sdk's scored CVEs is 7.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

lfprojects

4 CVEs

lfprojects mcp python sdk Vulnerabilities

Name: lfprojects mcp python sdk vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for mcp python sdk by lfprojects.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.5

Avg CVSS

2025–2026

Last updated July 15, 2026

Overview

lfprojects mcp python sdk has 4 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting lfprojects mcp python sdk, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of lfprojects mcp python sdk's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of lfprojects mcp python sdk's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No lfprojects mcp python sdk CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every lfprojects mcp python sdk version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.23.01 CVE
< 1.27.21 CVE
< 1.28.11 CVE
1.23.0 <= v < 1.27.21 CVE

Fixed in

1.27.22 CVEs
1.23.01 CVE
1.28.11 CVE

Find a version

4 CVEs

Sort

MCP Python SDK: WebSocket server transport does not support Host/Origin validation
CVE-2026-59950
Patch
CWE-346
High · CVSS 7.6
EPSS 0.1% (5th pct)2026-07-15
MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks
CVE-2026-52870
Patch
CWE-862
High · CVSS 7.6
EPSS 0.2% (15th pct)2026-07-15
MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
CVE-2026-52869
Patch
CWE-639
High · CVSS 7.1
EPSS 0.3% (24th pct)2026-07-15
DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost
CVE-2025-66416
Patch
CWE-1188
High · CVSS 7.6
EPSS 0.5% (38th pct)2025-12-02

Common weakness types

The CWE weakness categories most often found in lfprojects mcp python sdk CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many lfprojects mcp python sdk CVEs were published each year.

2025

1

2026

3

Other lfprojects products

Browse vulnerabilities for other products by lfprojects.

mlflow77 CVEs valkey5 CVEs model context protocol servers4 CVEs apptainer3 CVEs mcp go sdk3 CVEs mcp registry3 CVEs mcp typescript sdk3 CVEs mcp java sdk2 CVEs

All lfprojects vulnerabilities

Frequently asked questions

Common questions about lfprojects mcp python sdk vulnerabilities.

How many CVEs does lfprojects mcp python sdk have?: lfprojects mcp python sdk has 4 published CVE records since 2025.
How many lfprojects mcp python sdk CVEs are in CISA KEV?: None of lfprojects mcp python sdk's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for lfprojects mcp python sdk vulnerabilities?: No lfprojects mcp python sdk CVEs currently have a tracked public exploit in this dataset.
Which versions of lfprojects mcp python sdk are affected?: 7 distinct lfprojects mcp python sdk versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in lfprojects mcp python sdk CVEs?: lfprojects mcp python sdk's CVEs most often map to these CWE weakness types: CWE-1188 (Initialization of a Resource with an Insecure Default), CWE-346 (Origin Validation Error), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).
What is the average severity of lfprojects mcp python sdk CVEs?: The average CVSS base score across lfprojects mcp python sdk's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track lfprojects mcp python sdk vulnerabilities

Monitor new lfprojects mcp python sdk vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing