CVE-2026-63119 | modelcontextprotocol ruby-sdk up to 0.22.x StdioTransport IO#gets allocation of resources

A vulnerability described as problematic has been identified in modelcontextprotocol ruby-sdk up to 0.22.x. The impacted element is the function IO#gets of the component StdioTransport. The manipulation results in allocation of resources.

This vulnerability is known as CVE-2026-63119. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More