Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

github.com/modelcontextprotocol/go-sdk

Ecosystem:
go
Package URL:
pkg:golang/github.com/modelcontextprotocol/go-sdk
Total PRs:
378 Dependabot PRs
Latest PR:
17 days ago
Unique Repositories:
191 repositories
Unique Repos (30 days):
14 repositories
Security Advisories
Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk
GHSA-89xv-2j6f-qhc8 CVE-2026-33252 HIGH published 3 months ago • updated 19 days ago
The Go SDK's Streamable HTTP transport accepted browser-generated cross-site `POST` requests without validating the `Origin` header and without req...
Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk
GHSA-q382-vc8q-7jhj HIGH published 3 months ago • updated 20 days ago
The Go SDK recently transitioned to the `segmentio/encoding` library for JSON parsing in version 1.3.1. While this change addressed both case-insen...
DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost
GHSA-xw59-hvm2-8pj6 CVE-2026-34742 HIGH published 3 months ago • updated 9 days ago
The Model Context Protocol (MCP) Go SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server i...
MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity
GHSA-wvj2-96wp-fq3f CVE-2026-27896 HIGH published 4 months ago • updated 6 days ago
The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing. Go's standard library performs case-insens...
Recent PRs (filtered by: Open , Patch PRs )
RSS Feed Clear filter
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

Rogercode97/scouter #26

1.6.0 → 1.6.1 Patch PR
Open 21 days ago 1 comment
Rogercode97
build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

github/gh-aw #35019

1.6.0 → 1.6.1 Patch PR
Open 23 days ago 5 comments
github
deps: Bump the all-go-deps group with 10 updates

jordigilh/kubernaut #1291

1.6.0 → 1.6.1 Patch PR
Open 24 days ago 1 comment
jordigilh
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

nxtrace/NTrace-dev #183

1.6.0 → 1.6.1 Patch PR
Open 24 days ago 1 comment
nxtrace
deps: bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

FabianSchurig/bitbucket-cli #90

1.6.0 → 1.6.1 Patch PR
Open 24 days ago 2 comments
FabianSchurig
build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

jtarchie/pocketci #76

1.6.0 → 1.6.1 Patch PR
Open 25 days ago 1 comment
jtarchie
deps: bump github.com/modelcontextprotocol/go-sdk from 1.6.0 to 1.6.1

FabianSchurig/terraform-provider-bitbucket #9

1.6.0 → 1.6.1 Patch PR
Open 26 days ago 1 comment
FabianSchurig
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1

speakeasy-api/gram #1920

1.4.0 → 1.4.1 Patch PR
Open 3 months ago 4 comments
speakeasy-api
deps: bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1

jpvelasco/ludus #90

1.4.0 → 1.4.1 Patch PR
Open 3 months ago 1 comment
jpvelasco
build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1

openshift/backplane-cli #911

1.4.0 → 1.4.1 Patch PR
Open 3 months ago 3 comments
openshift
fix(deps): Bump github.com/modelcontextprotocol/go-sdk from 1.4.0 to 1.4.1

Kubedoll-Heavy-Industries/helm-mcp #22

1.4.0 → 1.4.1 Patch PR
Open 3 months ago 3 comments
kubedoll-heavy-industries
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

jaegertracing/jaeger #8105

1.3.0 → 1.3.1 Patch PR
Open 4 months ago 2 comments
jaegertracing
chore(deps): bump the go group across 1 directory with 11 updates

envoyproxy/ai-gateway #1898

1.3.0 → 1.3.1 Patch PR
Open 4 months ago 2 comments
envoyproxy
build(deps): Bump the go-minor-patch group with 7 updates

lookatitude/beluga-ai #157

1.3.0 → 1.3.1 Patch PR
Open 4 months ago 3 comments
lookatitude
⬆️ Bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

eat-pray-ai/yutu #152

1.3.0 → 1.3.1 Patch PR
Open 4 months ago 1 comment
eat-pray-ai
chore(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

Goldziher/ai-rulez #86

1.3.0 → 1.3.1 Patch PR
Open 4 months ago 1 comment
Goldziher
chore(deps): bump the go group across 1 directory with 7 updates

envoyproxy/ai-gateway #1875

1.3.0 → 1.3.1 Patch PR
Open 4 months ago 2 comments
envoyproxy
build(deps): bump github.com/modelcontextprotocol/go-sdk from 1.3.0 to 1.3.1

openchoreo/openchoreo #2095

1.3.0 → 1.3.1 Patch PR
Open 4 months ago 2 comments
openchoreo
deps(deps): bump github.com/modelcontextprotocol/go-sdk from 0.3.0 to 0.3.1

nmakod/codecontext #30

0.3.0 → 0.3.1 Patch PR
Open 10 months ago
nmakod
deps(deps): bump github.com/modelcontextprotocol/go-sdk from 0.3.0 to 0.3.1

berrydev-ai/super-mcp-server #9

0.3.0 → 0.3.1 Patch PR
Open 10 months ago 1 comment
berrydev-ai
Package Details
Name: github.com/modelcontextprotocol/go-sdk
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/modelcontextprotocol/go-sdk
JSON API: View JSON
Security Advisories

4

Active advisories
HIGH 4
View All golang Advisories
Package Information
Description:

Repository: https://github.com/modelcontextprotocol/go-sdk
Homepage: https://github.com/modelcontextprotocol/go-sdk
Latest Release: v0.1.0
12 months ago
Dependent Repos: 0
Dependent Packages: 0
Ranking: Top 5.6698% by dependent repos Top 5.3127% by dependent pkgs
PR Status
Open 182 (48.1%)
Merged 27 (7.1%)
Closed 169 (44.7%)
PR Types
Major 75 (19.8%)
Minor 263 (69.6%)
Patch 38 (10.1%)