https://github.com/modelcontextprotocol/go-sdk/security • 197 KB fetched Open original page
Overview · modelcontextprotocol/go-sdk · GitHub
Skip to content
Navigation Menu
Sign in Appearance settings
* Platform
* AI CODE CREATION
* GitHub Copilot Write better code with AI
* GitHub Copilot app Direct agents from issue to merge
* MCP Registry Integrate external tools
* DEVELOPER WORKFLOWS
* Actions Automate any workflow
* Codespaces Instant dev environments
* Issues Plan and track work
* Code Review Manage code changes
* Code Quality Enforce quality at merge
* APPLICATION SECURITY
* GitHub Advanced Security Find and fix vulnerabilities
* Code security Secure your code as you build
* Secret protection Stop leaks before they start
* EXPLORE
* Why GitHub
* Documentation
* Blog
* Changelog
* Marketplace
View all features
* Solutions
* BY COMPANY SIZE
* Enterprises
* Small and medium teams
* Startups
* Nonprofits
* BY USE CASE
* App Modernization
* DevSecOps
* DevOps
* CI/CD
* View all use cases
* BY INDUSTRY
* Healthcare
* Financial services
* Manufacturing
* Government
* View all industries
View all solutions
* Resources
* EXPLORE BY TOPIC
* AI
* Software Development
* DevOps
* Security
* View all topics
* EXPLORE BY TYPE
* Customer stories
* Events & webinars
* Ebooks & reports
* Business insights
* GitHub Skills
* SUPPORT & SERVICES
* Documentation
* Customer support
* Community forum
* Trust center
* Partners
View all resources
* Open Source
* COMMUNITY
* GitHub Sponsors Fund open source developers
* PROGRAMS
* Security Lab
* Maintainer Community
* GitHub Stars
* Archive Program
* REPOSITORIES
* Topics
* Trending
* Collections
* Enterprise
* ENTERPRISE SOLUTIONS
* Enterprise platform AI-powered developer platform
* AVAILABLE ADD-ONS
* GitHub Advanced Security Enterprise-grade security features
* Copilot for Business Enterprise-grade AI features
* Premium Support Enterprise-grade 24/7 support
* Pricing
Search /
Sign in
Sign up Appearance settings
You signed in with another tab or window. Reload to refresh your session.
You signed out in another tab or window. Reload to refresh your session.
You switched accounts on another tab or window. Reload to refresh your session.
Dismiss alert
Uh oh!
There was an error while loading. Please reload this page .
modelcontextprotocol
/
go-sdk
Public
*
Notifications
You must be signed in to change notification settings
*
Fork
536
*
Star
5.1k
*
Code
*
Issues
51
*
Pull requests
52
*
Discussions
*
Actions
*
Projects
*
Security and quality
4
*
Insights
Additional navigation options
*
Code
*
Issues
*
Pull requests
*
Discussions
*
Actions
*
Projects
*
Security and quality
*
Insights
Security: modelcontextprotocol/go-sdk
Security
Report a vulnerability
SECURITY.md
Security Policy
Thank you for helping keep the Model Context Protocol and its ecosystem secure.
Reporting Security Issues
If you discover a security vulnerability in this repository, please report it through
the GitHub Security Advisory process
for this repository.
Please do not report security vulnerabilities through public GitHub issues, discussions,
or pull requests.
What to Include
To help us triage and respond quickly, please include:
* A description of the vulnerability
* Steps to reproduce the issue
* The potential impact
* Any suggested fixes (optional)
*
DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost
GHSA-xw59-hvm2-8pj6
published
Mar 30, 2026
by
maciej-kisiel
High
*
Cross-Site Tool Execution for HTTP Servers without Authorization in github.com/modelcontextprotocol/go-sdk
GHSA-89xv-2j6f-qhc8
published
Mar 18, 2026
by
maciej-kisiel
High
*
Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk
GHSA-q382-vc8q-7jhj
published
Mar 18, 2026
by
maciej-kisiel
High
*
Improper Handling of Case Sensitivity in github.com/modelcontextprotocol/go-sdk
GHSA-wvj2-96wp-fq3f
published
Feb 25, 2026
by
jenn-newton
High
Learn more about advisories related to modelcontextprotocol/go-sdk in the GitHub Advisory Database
Footer
(c) 2026 GitHub, Inc.
Footer navigation
*
Terms
*
Privacy
*
Security
*
Status
*
Community
*
Docs
*
Contact
*
Manage cookies
*
Do not share my personal information
You can’t perform that action at this time.