Severity:
HIGH RISK
(7.1)
Cross-Site Request Forgery (CWE-352) in Go MCP SDK Streamable HTTP Transport
CVE-2026-33252
Published:
Mar 23, 2026
Status:
Received
Summary
Affected Context
Exploit Preconditions
Why This Happens
Potential Impact
General Mitigation Guidance
How Teams Detect Issues Like This
Frequently Asked Questions
Source
NDV
Recent Vulnerabilities
CWE-74;CWE-89
(7.3)
SQL Injection (CWE-89) in SourceCodester Online Catering Reservation /search.php
Data Exposure and Database Compromise
March 23, 2026
CWE-74;CWE-89
(7.3)
SQL Injection (CWE-89) in Search Parameter of SourceCodester E-Commerce Site /products.php
Data Exposure and Integrity Compromise via SQL Injection
March 23, 2026
