Skip to content
Threat Feed
Subscribe

Product

MCP Kotlin SDK (<= 0.15.0)

1 brief RSS
low advisory

Denial of Service via Uncontrolled Memory Allocation in MCP Kotlin SDK

The MCP Kotlin SDK through version 0.15.0 is vulnerable to denial of service due to the absence of a maxFrameSize limit in the Ktor WebSocket configuration, allowing remote clients to trigger heap exhaustion.

MCP Kotlin SDK
1c