{"id":"EUVD-2026-23300","enisaUuid":"3bf0f6a5-8832-3ca8-8852-884097757208","description":"mcp-framework is a framework for building Model Context Protocol (MCP) servers. In versions 0.2.21 and below, the readRequestBody() function in the HTTP transport concatenates request body chunks into a string with no size limit. Although a maxMessageSize configuration value exists, it is never enforced in readRequestBody(). A remote unauthenticated attacker can crash any mcp-framework HTTP server by sending a single large POST request to /mcp, causing memory exhaustion and denial of service. This issue has been fixed in version 0.2.22.","datePublished":"Apr 16, 2026, 9:24:27 PM","dateUpdated":"Apr 17, 2026, 6:46:07 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/QuantGeekDev/mcp-framework/security/advisories/GHSA-353c-v8x9-v7c3\nhttps://github.com/QuantGeekDev/mcp-framework/commit/f97d2bb76d6359faf10cd1fc54b4911476b62524\n","aliases":"CVE-2026-39313\nGHSA-353c-v8x9-v7c3\n","assigner":"GitHub_M","epss":0.5,"enisaIdProduct":[{"id":"831b91ed-735b-3c3b-8bc6-e353d69d9fa2","product":{"name":"mcp-framework","vendor":{"name":"QuantGeekDev"}},"product_version":"\u003c 0.2.22"}],"enisaIdVendor":[{"id":"2c8305c5-755b-3552-94ea-ed76276c74dc","vendor":{"name":"QuantGeekDev"}}],"enisaIdVulnerability":[{"id":"e47e808b-04b6-33e3-96b8-f927235395bb","vulnerability":{"id":"GHSA-353c-v8x9-v7c3","description":"MCP-Framework: Unbounded memory allocation in readRequestBody allows denial of service via HTTP transport","datePublished":"Apr 16, 2026, 8:44:32 PM","dateUpdated":"Apr 24, 2026, 8:36:27 PM","baseScore":0.0,"references":"https://github.com/QuantGeekDev/mcp-framework/security/advisories/GHSA-353c-v8x9-v7c3\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-39313\nhttps://github.com/QuantGeekDev/mcp-framework/commit/f97d2bb76d6359faf10cd1fc54b4911476b62524\nhttps://github.com/QuantGeekDev/mcp-framework\n","enisa_id":"EUVD-2026-23300\n","aliases":"CVE-2026-39313\nGHSA-353c-v8x9-v7c3\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"fe57ea9a-8207-3655-a78d-261896148fc4","vulnerability":{"id":"CVE-2026-39313","description":"mcp-framework is a framework for building Model Context Protocol (MCP) servers. In versions 0.2.21 and below, the readRequestBody() function in the HTTP transport concatenates request body chunks into a string with no size limit. Although a maxMessageSize configuration value exists, it is never enforced in readRequestBody(). A remote unauthenticated attacker can crash any mcp-framework HTTP server by sending a single large POST request to /mcp, causing memory exhaustion and denial of service. This issue has been fixed in version 0.2.22.","datePublished":"Apr 16, 2026, 9:24:27 PM","dateUpdated":"Apr 17, 2026, 6:46:07 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/QuantGeekDev/mcp-framework/security/advisories/GHSA-353c-v8x9-v7c3\nhttps://github.com/QuantGeekDev/mcp-framework/commit/f97d2bb76d6359faf10cd1fc54b4911476b62524\n","enisa_id":"EUVD-2026-23300\n","assigner":"GitHub_M","epss":0.5,"dataProcessed":"Oct 27, 2026, 7:13:18 AM","vulnerabilityProduct":[{"id":"8f90484c-2e16-384e-878b-967c3b5761b5","product":{"name":"mcp-framework","vendor":{"name":"QuantGeekDev"}},"product_version":"\u003c 0.2.22"}],"vulnerabilityVendor":[{"id":"6d3f1a49-97f3-376d-afe0-c46042c519cb","vendor":{"name":"QuantGeekDev"}}]}}],"enisaIdAdvisory":[]}