Threats tagged 'brew-pieces-cli-cve-2026-116686'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-116686pieces-cli · Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output Medium6.52026-10-29GCVE DatabaseCVE-2026-116686 The Model Context Protocol (MCP) Python SDK versions 1.10.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability where the client fetches server-chosen external $ref URLs during tool output schema validation. This can cause the client to make network or local file requests synchronously without timeout, potentially freezing the client session. The issue is fixed in versions 1.30.0 and 2.2.0, which restrict reference resolution to within the schema document only. Report on CVE-2026-116686 Vulnerability #brew-pieces-cli-cve-2026-116686 #homebrew	GCVE Database	2026-10-29

Page 1 of 1