Skip to content

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

High severity GitHub Reviewed Published Jun 29, 2026 in modelcontextprotocol/rust-sdk • Updated Sep 16, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts