[DaleSeo]

Affected crate(s)

• rmcp (45,192,055 total downloads; 25,999,423 recent downloads per crates.io)

Links to upstream issue(s) or PR(s)

• GitHub Security Advisory: GHSA-4432-vg92-fqh6
• Fix PR: fix(streamable-http-server): look up tool schemas per request modelcontextprotocol/rust-sdk#1349

Severity

High. Any client that can reach a Streamable HTTP server endpoint can grow server memory without limit by sending tools/call requests with distinct tool names, until the process runs out of memory. No authentication is required unless the server puts its own auth layer in front. The upstream GHSA uses CVSS 3.1 score 7.5.

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate (filed by an rmcp maintainer)

Testing

• Added the advisory under crates/rmcp/RUSTSEC-0000-0000.md using the RustSec template.
• rustsec-admin lint passes.

[djc]

Thanks! Can you fix the lint issue?