https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 22:14:24 +0000 https://vulnerability.circl.lu/sighting/b3f2e954-145b-4444-818c-166a7159c064/export {"uuid": "b3f2e954-145b-4444-818c-166a7159c064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/igerb4qix4sta", "content": "CVE-2026-108714 - MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket\nCVE ID : CVE-2026-108714\n \n Published : Oct. 11, 2026, 1:17 p.m. | 13\u00a0minutes ago\n \n Description : MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerabil...", "creation_timestamp": "2026-10-11T13:50:10.544057Z"} {"uuid": "b3f2e954-145b-4444-818c-166a7159c064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/igerb4qix4sta", "content": "CVE-2026-108714 - MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket\nCVE ID : CVE-2026-108714\n \n Published : Oct. 11, 2026, 1:17 p.m. | 13\u00a0minutes ago\n \n Description : MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerabil...", "creation_timestamp": "2026-10-11T13:50:10.544057Z"} https://vulnerability.circl.lu/sighting/b3f2e954-145b-4444-818c-166a7159c064/export Sun, 11 Oct 2026 13:50:10 +0000 https://vulnerability.circl.lu/sighting/f4b0a457-aebc-42b5-98f3-1d7308171531/export {"uuid": "f4b0a457-aebc-42b5-98f3-1d7308171531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108714", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117422319039356871", "content": "CVE-2026-108714 MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB over one or a few connections, forcing huge heap allocations and causing denial of service.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108714https://hackmd.io/@haind/mcp-kotlin-sdk-websocket-frame-allocation-doshttps://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-server/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/server/WebSocketMcpKtorServerExtensions.kt#L41-L63https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/WebSocketMcpTransport.kt#L60-L85https://github.com/modelcontextprotocol/kotlin-sdkhttps://www.vulncheck.com/advisories/mcp-kotlin-sdk-through-0.15.0-memory-exhaustion-via-application-mcpwebsocket#modelcontextprotocol #kotlin-sdk#CVE_2026_108714#bot", "creation_timestamp": "2026-10-11T12:39:57.924654Z"} {"uuid": "f4b0a457-aebc-42b5-98f3-1d7308171531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108714", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117422319039356871", "content": "CVE-2026-108714 MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs Ktor WebSockets without a maxFrameSize limit. Attackers can send small frame headers declaring payloads near 2 GiB over one or a few connections, forcing huge heap allocations and causing denial of service.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108714https://hackmd.io/@haind/mcp-kotlin-sdk-websocket-frame-allocation-doshttps://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-server/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/server/WebSocketMcpKtorServerExtensions.kt#L41-L63https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/WebSocketMcpTransport.kt#L60-L85https://github.com/modelcontextprotocol/kotlin-sdkhttps://www.vulncheck.com/advisories/mcp-kotlin-sdk-through-0.15.0-memory-exhaustion-via-application-mcpwebsocket#modelcontextprotocol #kotlin-sdk#CVE_2026_108714#bot", "creation_timestamp": "2026-10-11T12:39:57.924654Z"} https://vulnerability.circl.lu/sighting/f4b0a457-aebc-42b5-98f3-1d7308171531/export Sun, 11 Oct 2026 12:39:57 +0000