modelcontextprotocol/rust-sdk
main@ 3a2ebbc
Fixes5
CVEs0
Peak severityHigh
Commits674
Regression coverage80.0%
Highlights
Authentication Bypass: 3 prior fixes. Scrutinize any change in this area.
crates/rmcp/src/transport/auth.rs: most-fixed (4 issues). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authentication Bypass: 3 historical fix(es) link crates/rmcp/src/transport/auth.rs to Authentication Bypass.
Information Disclosure: 1 historical fix(es) link crates/rmcp/src/transport/common/reqwest/streamable_http_client.rs to Information Disclosure.
SSRF: 1 historical fix(es) link crates/rmcp/src/transport/auth.rs to SSRF.
Last analyzed 30 Sep 2026, 02:53 UTC