@frontmcp/adapters (>=1.0.0 <=1.0.3), @frontmcp/plugin-approval (>=1.0.0 <=1.0.3) +7 more potentially affected by CVE-2026-39885 via @frontmcp/sdk (>=1.0.0-beta.1 <=1.0.3)

@frontmcp/sdk NPM version =1.0.0-beta.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.3 Source cves: CVE-2026-39885 Source advisory: SNYK:JS-FRONTMCPSDK-16423474...

CVE-2026-39885

creationtimestamp| type| source ---|---|--- 2026-04-08 02:35:34+00:00| published-proof-of-concept| https://github.com/agentfront/frontmcp/security/advisories/GHSA-v6ph-xcq9-qxxj 2026-04-08 02:35:34+00:00| published-proof-of-concept|...