Reports
Dated editions built from the observatory's data. The numbers in an edition are frozen when it is published, so a citation keeps pointing at the figures it quoted.
- Known vulnerabilities in MCP servers, 2026 Q3
889 known CVEs sit on 152 of 57,246 tracked MCP servers, and 869 servers inherit one through a dependency.