Reports

Dated editions built from the observatory's data. The numbers in an edition are frozen when it is published, so a citation keeps pointing at the figures it quoted.

editions

  1. Known vulnerabilities in MCP servers, 2026 Q3

    889 known CVEs sit on 152 of 57,246 tracked MCP servers, and 869 servers inherit one through a dependency.

    published 2026-09-13