io.modelcontextprotocol.sdk:mcp-core

Core classes of the Java SDK implementation of the Model Context Protocol, enabling seamless integration with language models and AI tools

Latest 2.0.1

95%

Total Score

Maintainer Stability

100

Dependencies

Maturity

Supply Chain

100

Are you affected? Scan for Free

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-107635 New mcp-core is vulnerable to Denial of Service (DoS) in versions 0.18.0 - 0.18.3, 1.0.0 - 1.1.3 and 2.0.0 - 2.0.0.	0.18.0 - 0.18.31.0.0 - 1.1.32.0.0 - 2.0.0	Medium
AIKIDO-2026-935066 New mcp-core is vulnerable to Denial of Service (DoS) in versions 0.18.0 - 0.18.3, 1.0.0 - 1.1.3 and 2.0.0 - 2.0.0.	0.18.0 - 0.18.31.0.0 - 1.1.32.0.0 - 2.0.0	High
CVE-2026-35568 io.modelcontextprotocol.sdk:mcp-core is vulnerable to Origin Validation Error in versions 0.0.0 - 1.0.0.	0.0.0 - 1.0.0	High
CVE-2026-34237 io.modelcontextprotocol.sdk:mcp-core is vulnerable to Permissive Cross-domain Security Policy with Untrusted Domains in versions 1.1.0 - 1.1.0, 1.0.0 - 1.0.0 and 0.0.0 - 0.18.3.	0.0.0 - 0.18.31.0.0 - 1.0.01.1.0 - 1.1.0	Medium

No maintainer information available.

Dependency	Last Release	Score
org.slf4j:slf4j-api Version 2.0.16	—	—
com.fasterxml.jackson.core:jackson-annotations Version 2.21	—	—
io.projectreactor:reactor-core Version 3.7.0	—	—