mcp-security-project/mcp-cve-project
Developer toolsЭта страница переведена автоматически. Технические детали смотрите в оригинале. Открыть оригинал
The Project shares all information on MCP related CVE's published
Обзор
This repository is a curated index of publicly disclosed that touch the ecosystem: official and third-party servers, SDKs, gateways, clients, and integrations where MCP is part of the attack surface or fix scope. Each linked note under cves/ summarizes the affected component, weakness class, and pointers for defenders and maintainers. indexed MCP security advisories (CVEs and GHSA-only records; indexed below by disclosure-related date). Indexed CVEs are mapped to the primary category in the OWASP MCP Top 10 (2025). Mappings use NVD/CWE and index summaries where available. A CVE may relate to more than one MCP risk; only the mapping is shown in the tables below. These records were confirmed during the September 27, 2026 MCP CVE/GHSA gap review. All have separate defensive notes under cves/; three currently have GHSA identifiers but no assigned CVE.
README
Показан фрагмент оригинального README. Открыть оригинал.
MCP-related CVE reference
This repository is a curated index of publicly disclosed Common Vulnerabilities and Exposures (CVEs) that touch the Model Context Protocol (MCP) ecosystem: official and third-party servers, SDKs, gateways, clients, and integrations where MCP is part of the attack surface or fix scope. Each linked note under [cves/](cves/) summarizes the affected component, weakness class, and pointers for defenders and maintainers.
Coverage: 590 indexed MCP security advisories (CVEs and GHSA-only records; indexed below by disclosure-related date).
Maintained and curated by Vandana Verma Sehgal.
OWASP MCP Top 10 (2025) mapping
Indexed CVEs are mapped to the primary category in the OWASP MCP Top 10 (2025). Mappings use NVD/CWE and index summaries where available. A CVE may relate to more than one MCP risk; only the primary mapping is shown in the tables below.
| ID | Category | Count |
|---|---|---|
| MCP01 | Token Mismanagement & Secret Exposure | 94 |
| MCP02 | Privilege Escalation via Scope Creep | 82 |
| MCP03 | Tool Poisoning | 2 |
| MCP04 | Software Supply Chain Attacks & Dependency Tampering | 38 |
| MCP05 | Command Injection & Execution | 213 |
| MCP06 | Prompt Injection via Contextual Payloads | 13 |
| MCP07 | Insufficient Authentication & Authorization | 115 |
| MCP08 | Lack of Audit and Telemetry | 4 |
Установка
This server does not publish a one-line install command.
Open the repository installation guide Новичок в MCP? Начните с руководства на mcpskill.org →