DNS Rebinding Protection Disabled by Default in Model Context Protocol Go SDK for Servers Running on Localhost
High severity
GitHub Reviewed
Published
Mar 30, 2026
in
modelcontextprotocol/go-sdk
•
Updated Apr 6, 2026
Give feedback on Dependabot alerts