Evidence · DiggingBeagle record
Python MCP SDK oversized HTTP and OAuth request buffering CVE-2026-109527 — original research or disclosure
Reported evidence for An SDK-level denial-of-service weakness was corrected with a consistent request-body limit in supported builds. Research intake: DB-RADAR-CP7-CP7A-056.
- Source role
- primary disclosure
Evidence record
Reported evidence for An SDK-level denial-of-service weakness was corrected with a consistent request-body limit in supported builds. Research intake: DB-RADAR-CP7-CP7A-056.
Claim-level citations (1)
- supportsPython MCP SDK buffered unbounded HTTP request bodies before the size check: The cited authors or maintainers report the following bounded finding: An SDK-level denial-of-service weakness was corrected with a consistent request-body limit in supported builds.
Original primary document, reported finding and evaluation context; checkpoint DB-RADAR-CP7-CP7A-056