Threats tagged 'ghsa-w4fh-qvv9-3v23'

The Model Context Protocol (MCP) Python SDK versions 1.10.0 through 1.29.1 and 2.0.0 through 2.1.1 have a vulnerability in server-side bearer-token authentication. The SDK does not verify that a token's audience matches the intended server, allowing tokens issued for other services by the same authorization server to be accepted. This can lead to unauthorized access. Fixed in versions 1.30.0 and 2.2.0, the fix requires enabling a new setting to validate the token audience explicitly.