Evidence · DiggingBeagle record
Python MCP SDK session leakage despite DELETE corrected in CVE-2026-59951 — original research or disclosure
Reported evidence for Independent from request-body buffering, stale Streamable HTTP session entries could accumulate indefinitely. Research intake: DB-RADAR-CP7-CP7A-057.
- Source role
- primary disclosure
Evidence record
Reported evidence for Independent from request-body buffering, stale Streamable HTTP session entries could accumulate indefinitely. Research intake: DB-RADAR-CP7-CP7A-057.
Claim-level citations (1)
- supportsPython MCP SDK retained terminated sessions and initialization state: The cited authors or maintainers report the following bounded finding: Independent from request-body buffering, stale Streamable HTTP session entries could accumulate indefinitely.
Original primary document, reported finding and evaluation context; checkpoint DB-RADAR-CP7-CP7A-057