pkg:PyPI/fastmcp

All known vulnerabilities

• CRITICAL10.0CVE-2026-32871FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
  from 0, < 3.2.0
• MEDIUM6.7CVE-2025-64340FastMCP has a Command Injection vulnerability - Gemini CLI
  from 0, < 3.2.0
• —CVE-2026-27124FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
  from 0, < 3.2.0
• —FastMCP OAuth Proxy token reuse across MCP servers
  from 0, < 2.14.2
• —FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
  from 0, < 2.13.0
• —FastMCP vulnerable to reflected XSS in client's callback page
  from 0, < 2.13.0