6.2Medium
MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)
modelcontextprotocol io.modelcontextprotocol:kotlin-sdk; modelcontextprotocol io.modelcontextprotocol:kotlin-sdk-client; modelcontextprotocol io.modelcontextprotocol:kotlin-sdk-core; modelcontextprotocol io.modelcontextprotocol:kotlin-sdk-server
MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Model Context Protocol. In versions 0.7.0 through 0.12.0, `ReadBuffer.append` in `kotlin-sdk-core/src/commonMain/kotlin/io/modelcontextprotocol/kotlin/sdk/shared/ReadBuffer.kt` writes…