{"schema":"vulnpedia.research/1","cve":"CVE-2026-108714","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://hackmd.io/@haind/mcp-kotlin-sdk-websocket-frame-allocation-dos","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","url":"https://hackmd.io/@haind/mcp-kotlin-sdk-websocket-frame-allocation-dos"},{"source":"nvd","sourceId":"CVE-2026-108714","modified":"2026-10-16T19:18:44.867","url":"https://hackmd.io/@haind/mcp-kotlin-sdk-websocket-frame-allocation-dos"}]},{"url":"https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-server/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/server/WebSocketMcpKtorServerExtensions.kt#L41-L63","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","url":"https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-server/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/server/WebSocketMcpKtorServerExtensions.kt#L41-L63"},{"source":"nvd","sourceId":"CVE-2026-108714","modified":"2026-10-16T19:18:44.867","url":"https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-server/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/server/WebSocketMcpKtorServerExtensions.kt#L41-L63"}]},{"url":"https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/WebSocketMcpTransport.kt#L60-L85","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","url":"https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/WebSocketMcpTransport.kt#L60-L85"},{"source":"nvd","sourceId":"CVE-2026-108714","modified":"2026-10-16T19:18:44.867","url":"https://github.com/modelcontextprotocol/kotlin-sdk/blob/0.15.0/kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/WebSocketMcpTransport.kt#L60-L85"}]},{"url":"https://github.com/modelcontextprotocol/kotlin-sdk","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","url":"https://github.com/modelcontextprotocol/kotlin-sdk"},{"source":"nvd","sourceId":"CVE-2026-108714","modified":"2026-10-16T19:18:44.867","url":"https://github.com/modelcontextprotocol/kotlin-sdk"}]},{"url":"https://www.vulncheck.com/advisories/mcp-kotlin-sdk-through-0.15.0-memory-exhaustion-via-application-mcpwebsocket","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-11T12:19:27.291Z","url":"https://www.vulncheck.com/advisories/mcp-kotlin-sdk-through-0.15.0-memory-exhaustion-via-application-mcpwebsocket"},{"source":"nvd","sourceId":"CVE-2026-108714","modified":"2026-10-16T19:18:44.867","url":"https://www.vulncheck.com/advisories/mcp-kotlin-sdk-through-0.15.0-memory-exhaustion-via-application-mcpwebsocket"}]},{"source":"euvd","sourceId":"EUVD-2026-96988","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96988","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-96988","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96988"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}