Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

github.com/modelcontextprotocol/go-sdk

Ecosystem:
go
Package URL:
pkg:golang/github.com/modelcontextprotocol/go-sdk
Total PRs:
378 Dependabot PRs
Latest PR:
17 days ago
Unique Repositories:
191 repositories
Unique Repos (30 days):
14 repositories
Security Advisories
Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk
GHSA-89xv-2j6f-qhc8 CVE-2026-33252 HIGH published 3 months ago • updated 19 days ago
The Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without validating the `Origin` header and without req...
Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk
GHSA-q382-vc8q-7jhj HIGH published 3 months ago • updated 20 days ago
The Go SDK recently transitioned to the `segmentio/encoding` library for JSON parsing in version 1.3.1. While this change addressed both case-insen...
DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost
GHSA-xw59-hvm2-8pj6 CVE-2026-34742 HIGH published 3 months ago • updated 9 days ago
The Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server i...
MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity
GHSA-wvj2-96wp-fq3f CVE-2026-27896 HIGH published 4 months ago • updated 6 days ago
The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing. Go's standard library performs case-insens...
Recent PRs (filtered by: Closed , Patch PRs )
RSS Feed Clear filter
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1 in the go-minor-patch group across 1 directory

jmrplens/gitlab-mcp-server #139

1.6.0 → 1.6.1 Patch PR
Closed 20 days ago 2 comments
jmrplens
chore(deps): bump the go-minor-patch group with 2 updates

jmrplens/gitlab-mcp-server #135

1.6.0 → 1.6.1 Patch PR
Closed 24 days ago 2 comments
jmrplens
deps(go): bump the go-minor-patch group with 7 updates

ruaan-deysel/vault #106

1.6.0 → 1.6.1 Patch PR
Closed 24 days ago 2 comments
ruaan-deysel
deps: bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

txn2/mcp-data-platform #476

1.6.0 → 1.6.1 Patch PR
Closed 25 days ago 2 comments
txn2
chore(deps): bump the go_modules group across 1 directory with 6 updates

zeromicro/go-zero #5541

1.4.0 → 1.4.1 Patch PR
Closed 2 months ago 1 comment
zeromicro
Bump the go_modules group across 8 directories with 7 updates

google/android-cuttlefish #2322

1.4.0 → 1.4.1 Patch PR
Closed 3 months ago 1 comment
google
chore(deps): bump the go-minor group with 2 updates

Benny93/axon-go #6

1.4.0 → 1.4.1 Patch PR
Closed 3 months ago 2 comments
Benny93
build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1

chickenzord/linkding-mcp #10

1.4.0 → 1.4.1 Patch PR
Closed 3 months ago 1 comment
chickenzord
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

sipeed/picoclaw #1199

1.3.0 → 1.3.1 Patch PR
Closed 3 months ago 1 comment
sipeed
chore(deps): bump the go_modules group across 1 directory with 3 updates

asleekgeek/LocalAI #387

1.3.0 → 1.3.1 Patch PR
Closed 4 months ago 1 comment
asleekgeek
Bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

telepresenceio/telepresence #4065

1.3.0 → 1.3.1 Patch PR
Closed 4 months ago 1 comment
telepresenceio
chore(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

valter-silva-au/ai-dev-brain-v1 #43

1.3.0 → 1.3.1 Patch PR
Closed 4 months ago 1 comment
valter-silva-au
build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1 in the go_modules group across 1 directory

sandboxec/sandboxec #2

1.3.0 → 1.3.1 Patch PR
Closed 4 months ago 3 comments
sandboxec
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

grokify/aha-mcp-server #46

1.3.0 → 1.3.1 Patch PR
Closed 4 months ago 1 comment
grokify
Bump github.com/modelcontextprotocol/go-sdk from 0.3.0 to 0.3.1

whywaita/myshoes-mcp-server #25

0.3.0 → 0.3.1 Patch PR
Closed 10 months ago 1 comment
whywaita
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 0.3.0 to 0.3.1

ryeguard/gowm #19

0.3.0 → 0.3.1 Patch PR
Closed 10 months ago 1 comment
ryeguard
Package Details
Name: github.com/modelcontextprotocol/go-sdk
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/modelcontextprotocol/go-sdk
JSON API: View JSON
Security Advisories

4

Active advisories
HIGH 4
View All golang Advisories
Package Information
Description:

Repository: https://github.com/modelcontextprotocol/go-sdk
Homepage: https://github.com/modelcontextprotocol/go-sdk
Latest Release: v0.1.0
12 months ago
Dependent Repos: 0
Dependent Packages: 0
Ranking: Top 5.6698% by dependent repos Top 5.3127% by dependent pkgs
PR Status
Open 182 (48.1%)
Merged 27 (7.1%)
Closed 169 (44.7%)
PR Types
Major 75 (19.8%)
Minor 263 (69.6%)
Patch 38 (10.1%)