mcp-security-project/mcp-cve-project
Developer toolsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
The Project shares all information on MCP related CVE's published
概要
This repository is a curated index of publicly disclosed that touch the ecosystem: official and third-party servers, SDKs, gateways, clients, and integrations where MCP is part of the attack surface or fix scope. Each linked note under cves/ summarizes the affected component, weakness class, and pointers for defenders and maintainers. indexed MCP security advisories (CVEs and GHSA-only records; indexed below by disclosure-related date). Indexed CVEs are mapped to the primary category in the OWASP MCP Top 10 (2025). Mappings use NVD/CWE and index summaries where available. A CVE may relate to more than one MCP risk; only the mapping is shown in the tables below. These records were confirmed during the September 27, 2026 MCP CVE/GHSA gap review. All have separate defensive notes under cves/; three currently have GHSA identifiers but no assigned CVE.
README
以下は原文 README の抜粋です。原文を見る。
MCP-related CVE reference
This repository is a curated index of publicly disclosed Common Vulnerabilities and Exposures (CVEs) that touch the Model Context Protocol (MCP) ecosystem: official and third-party servers, SDKs, gateways, clients, and integrations where MCP is part of the attack surface or fix scope. Each linked note under [cves/](cves/) summarizes the affected component, weakness class, and pointers for defenders and maintainers.
Coverage: 590 indexed MCP security advisories (CVEs and GHSA-only records; indexed below by disclosure-related date).
Maintained and curated by Vandana Verma Sehgal.
OWASP MCP Top 10 (2025) mapping
Indexed CVEs are mapped to the primary category in the OWASP MCP Top 10 (2025). Mappings use NVD/CWE and index summaries where available. A CVE may relate to more than one MCP risk; only the primary mapping is shown in the tables below.
| ID | Category | Count |
|---|---|---|
| MCP01 | Token Mismanagement & Secret Exposure | 94 |
| MCP02 | Privilege Escalation via Scope Creep | 82 |
| MCP03 | Tool Poisoning | 2 |
| MCP04 | Software Supply Chain Attacks & Dependency Tampering | 38 |
| MCP05 | Command Injection & Execution | 213 |
| MCP06 | Prompt Injection via Contextual Payloads | 13 |
| MCP07 | Insufficient Authentication & Authorization | 115 |
| MCP08 | Lack of Audit and Telemetry | 4 |
インストール
This server does not publish a one-line install command.
Open the repository installation guide MCP 初心者？mcpskill.org のガイドから始めましょう →