Records176All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical24CVSS 9.0–10.0
CVSS high100CVSS 7.0–8.9
Exploited now
MLflow records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions prior to 1.3.1.
CVSS 4.0HIGH 7.0· Network · No auth · No interaction · EPSS 0.00292 · Published 2026-02-26 · Partial fix · 1.3.1 CWE-178
Priority LOW 36
The Go MCP SDK used Go's standard encoding/json.
CVSS 4.0HIGH 7.6· Network · No auth · User interaction · EPSS 0.00472 · Published 2026-04-02 · Partial fix · 1.4.0 CWE-1188
Priority LOW 30
The Go MCP SDK used Go's standard encoding/json.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00181 · Published 2026-03-23 · Partial fix · 1.4.1 CWE-352
