Christian Tzolov

2 exploits Active since Mar 2026
CVE-2026-34237 WRITEUP MEDIUM WRITEUP
MCP Java SDK HTTP Transports - Wildcard CORS
MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 0.83.0, 1.0.1, and 1.1.1.
CVSS 6.1
CVE-2026-34237 WRITEUP MEDIUM WRITEUP
MCP Java SDK HTTP Transports - Wildcard CORS
MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability. This issue has been patched in versions 0.83.0, 1.0.1, and 1.1.1.
CVSS 6.1