GHSA-7683-3w9x-ch42 (mcp): Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)
21-Jul-2026 1
Originally appeared on RubySec.## Summary The stdio transports in MCP::Server::Transports::StdioTransport and MCP::Client::Stdio read newline-delimited JSON-RPC frames using IO#gets with no limit argument. CRuby's IO#gets with no limit reads from the current position until the...
GHSA-7683-3w9x-ch42 (mcp): Unbounded line buffer in stdio transports leads to memory exhaustion (DoS) #ruby #rubydeveloper #rubyonrails #ruby #rubyonrails #programming #webdev #ghsa-7683-3w9x-ch42 #(mcp): https://rubyonrails.ba/link/ghsa-7683-3w9x-ch42-mcp-unbounded-line-buffer-in-stdio-transports-leads-to-memory-exhaustion-dos
