CVE-2025-53365
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-53365
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-53365.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-53365
- Aliases
- Published
- 2025-07-04T22:15:22Z
- Modified
- 2025-07-08T16:50:59.977542Z
- Summary
- [none]
- Details
-
The MCP Python SDK, called
mcpon PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to version 1.10.0, if a client deliberately triggers an exception after establishing a streamable HTTP session, this can lead to an uncaught ClosedResourceError on the server side, causing the server to crash and requiring a restart to restore service. Impact may vary depending on the deployment conditions, and presence of infrastructure-level resilience measures. Version 1.10.0 contains a patch for the issue. - References