VDB

GO-2026-4773

GO-2026-4773 PUBLISHED

Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk

Affected Products

VendorProductVersions
github.commodelcontextprotocol/go-sdk0, 0

Timeline

  • Mar 23, 2026 CVE Published
  • Mar 25, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›