[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVzyZxJnXS8hKn0b6l1JJiV7oG5oTQGrSZ77C-o5zs9Q":3,"g5a-ex:lfprojects\u002Fmcp_go_sdk@*":47,"g5a-family:lfprojects\u002Fmcp_go_sdk":49},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":24,"seoMetadata":25,"meta":44},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"lfprojects","mcp_go_sdk",0,1,"2026-04-02",[],"Mcp Go Sdk by Lfprojects is a technology product and 1 known security vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2026-34742","The Go MCP SDK used Go's standard encoding\u002Fjson. Prior to version 1.4.0, the Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication with StreamableHTTPHandler or SSEHandler, a malicious website could exploit DNS rebinding to bypass same-origin policy restrictions and send requests to the local MCP server. This could allow an attacker to invoke tools or access resources exposed by the MCP server on behalf of the user in those limited circumstances. This issue has been patched in version 1.4.0.",7.6,"v4.0","High",false,0.00664,[],{"title":26,"metaDescription":27,"keywords":28,"structuredData":29},"Mcp Go Sdk by Lfprojects - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mcp Go Sdk by Lfprojects with 1 tracked vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Mcp Go Sdk vulnerabilities, Mcp Go Sdk security, Mcp Go Sdk CVE, Lfprojects Mcp Go Sdk, Mcp Go Sdk threat intelligence, Lfprojects security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":30,"@type":31,"name":32,"description":27,"url":33,"manufacturer":34,"applicationCategory":38,"softwareVersion":39,"mainEntity":40},"https:\u002F\u002Fschema.org","SoftwareApplication","Mcp Go Sdk","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flfprojects\u002Fmcp_go_sdk",{"@type":35,"name":36,"url":37},"Organization","Lfprojects","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flfprojects","Security Software","Multiple versions",{"@type":41,"name":42,"description":43,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Mcp Go Sdk Security Vulnerabilities","Security vulnerabilities affecting Mcp Go Sdk by Lfprojects",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":45,"apiVersion":46},"2026-10-18T22:15:31.170Z","3.0",{"rows":48,"total":9,"capped":22,"failed":9},[],[]]