Lfprojects Mcp Python Sdk — known CVE vulnerabilities

Every CVE whose affected-product data names Lfprojects Mcp Python Sdk, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-66416 — CVSS 8.1 (high): The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.23.0, tThe…
• CVE-2026-59950 — CVSS 8.1 (high): The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated…
• CVE-2026-52870 — CVSS 7.6 (high): The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default…
• CVE-2026-52869 — CVSS 7.1 (high): The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and…