Executive brief
Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk
Affected products
- Go github.com/modelcontextprotocol/go-sdk
Junglewise Threat Intelligence
Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk
Severity: medium · CVSS 4 · Published 2026-03-19
Technologies: github.com/modelcontextprotocol/go-sdk (Go). Vendors: Go.
Related threats
- modelcontextprotocol go-sdk DNS rebinding in HTTP handlers
- GO-2026-4770 - Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk
- GO-2026-4773 - Cross-Site Tool Execution for HTTP Servers without Authorizatrion in github.com/modelcontextprotocol/go-sdk
- Model Context Protocol Go SDK improper case sensitivity in JSON-RPC parsing