Registry (Modelcontextprotocol) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-14. Vendor: Modelcontextprotocol.

CVEs of Registry

• CVE-2026-44428 - CVSS 4.7 (medium), 2026-05-14: The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.6, the client-side and server-side GitHub…
• CVE-2026-44427 - CVSS 0 (none), 2026-05-14: The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. From 1.1.0 to 1.7.4, the TrailingSlashMiddleware in…
• CVE-2026-45781 - CVSS 3.5 (low), 2026-05-14: The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.9, OCI ownership validation skips…
• CVE-2026-44430 - CVSS 6.3 (medium), 2026-05-14: The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the Registry's HTTP-based namespace…
• CVE-2026-44429 - CVSS 5.4 (medium), 2026-05-14: The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the public catalogue UI served at GET /…