acpx-teams (0.1.0), arifos (>=2026.2.22, <=2026.4.16) +58 more potentially affected by CVE-2025-64340 via fastmcp (>=3.0.0b1, <=3.1.1)

fastmcp PYPI version =3.0.0b1, =2026.2.22, =2026.3.13, =1.0.0, =0.56.0, =0.1.0, =0.3.2, =0.2.0, =0.3.0, =1.1.0, =0.0.1, =0.1.0, =1.0.0, =1.4.0 and more Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...

aa-rag (0.4.3), hou-garden (>=0.0.1, <=0.0.8) +9 more potentially affected by CVE-2025-64340 via fastmcp (2.2.0)

fastmcp PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aa-rag 0.4.3 - hou-garden =0.0.1, =1.0.0, =2.0.0, =0.1.1, =0.1.1, =2.0.0 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...

ai-proxy-server (>=3.0.2, <=3.1.0), aiowhitebit-mcp (0.3.0) +48 more potentially affected by CVE-2025-64340 via fastmcp (2.12.5)

fastmcp PYPI version 2.12.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-proxy-server =3.0.2, =1.7.3, =0.1.2.dev0, =1.3.1, =1.0.8, =0.2.0, =0.2.1, =0.1.1, =0.2.12, =0.2.19 and more Source cves: CVE-2025-64340 Source...

agentfetch-mcp (>=1.0.0, <=1.0.1), constitute-mcp (>=0.1.18, <=0.1.27) +30 more potentially affected by CVE-2025-64340 via fastmcp (0.4.1)

fastmcp PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentfetch-mcp =1.0.0, =0.1.18, =2.0.2, =1.0.0, =0.1.0, =0.1.41, =1.0.0, =1.0.1 - iflow-mcp-philschmid-code-sandbox-mcp 0.1.0 -...

azpaddypy (0.9.29), basic-memory (>=0.14.1, <=0.14.2) +19 more potentially affected by CVE-2025-64340 via fastmcp (2.9.2)

fastmcp PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - azpaddypy 0.9.29 - basic-memory =0.14.1, =0.0.22, =0.1.98, =0.8.1, =0.4.0, =0.1.1, =0.1.0, =1.0.0, =2.9.0, =0.1.1, =0.4.24, =1.1.0, =0.2.0, =0.1.3...

complexipy-mcp (>=0.1.0, <=0.1.1), gyy-mcp (>=1.0.0, <=1.1.2) +19 more potentially affected by CVE-2025-64340 via fastmcp (2.14.2)

fastmcp PYPI version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - complexipy-mcp =0.1.0, =1.0.0, =1.1.2 - oracle-oci-cloud-guard-mcp-server 1.1.2 - oracle-oci-cloud-mcp-server 1.1.2 -...

ai-application-gateway (>=0.1.1, <=0.1.5), ai-universe-mail (>=0.1.0, <=0.1.1) +28 more potentially affected by CVE-2025-64340 via fastmcp (2.13.0.2)

fastmcp PYPI version 2.13.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-application-gateway =0.1.1, =0.1.0, =0.2.11, =0.21.6, =0.1.5, =0.1.0, =0.0.92, =0.4.4, =0.4.0, =0.1.5, =1.0.0, =1.0.0, =1.0.1 -...

agentsphere-mcp-server (>=1.8.1, <=1.9.1), azpaddypy (>=0.9.30, <=0.9.77) +15 more potentially affected by CVE-2025-64340 via fastmcp (2.12.4)

fastmcp PYPI version 2.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentsphere-mcp-server =1.8.1, =0.9.30, =0.9.4, =0.1.0a1, =1.0.35, =1.26.1, =0.2.0, =0.9.17, =0.0.1, =0.1.5, =0.1.6 and more Source cves:...

aio-tests-mcp (>=0.1.0, <=0.1.2), aiowhitebit-mcp (0.2.5) +4 more potentially affected by CVE-2025-64340 via fastmcp (2.5.1)

fastmcp PYPI version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aio-tests-mcp =0.1.0, =0.1.8, =1.0.0, =1.0.78 - iflow-mcp-sean-tate-fastmcp-python-oauth2-with-entra-id 0.1.0 - sakit 11.0.0 Source cves:...

aa-rag (0.4.3), hou-garden (>=0.0.1, <=0.0.8) +9 more potentially affected by CVE-2025-64340 via fastmcp (2.2.0)

fastmcp PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aa-rag 0.4.3 - hou-garden =0.0.1, =1.0.0, =2.0.0, =0.1.1, =0.1.1, =2.0.0 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

ai-xone-mcp-workflow (>=0.0.2a1, <=0.0.2a5), axians-mcp (>=0.1.0, <=1.2.2) +10 more potentially affected by CVE-2025-64340 via fastmcp (2.3.5)

fastmcp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-xone-mcp-workflow =0.0.2a1, =0.1.0, =0.1.0, =0.1.0a0, =0.1.20, =0.10.5, =0.0.0, =0.0.1, =1.0.0 Source cves: CVE-2025-64340 Source advisory:...

vail-model-registry (>=0.1.11, <=0.1.12) potentially affected by CVE-2025-64340 via fastmcp (2.10.0)

fastmcp PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - vail-model-registry =0.1.11, =0.1.12 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

iflow-mcp-erickjtorres-flutter-surf-mcp (0.1.0), one-prompt-agents (>=0.0.1, <=0.0.3) potentially affected by CVE-2025-64340 via fastmcp (2.3.4)

fastmcp PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-erickjtorres-flutter-surf-mcp 0.1.0 - one-prompt-agents =0.0.1, =0.0.3 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-V...

ai-code-review (>=2.0.0.dev1, <=3.1.2), ai-cr (>=2.0.0.dev1, <=3.1.2) +24 more potentially affected by CVE-2025-64340 via fastmcp (2.8.1)

fastmcp PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-code-review =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.2.0, =2.0.0.dev1, =2.0.0.dev1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more...

azpaddypy (0.9.29), basic-memory (>=0.14.1, <=0.14.2) +19 more potentially affected by CVE-2025-64340 via fastmcp (2.9.2)

fastmcp PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - azpaddypy 0.9.29 - basic-memory =0.14.1, =0.0.22, =0.1.98, =0.8.1, =0.4.0, =0.1.1, =0.1.0, =1.0.0, =2.9.0, =0.1.1, =0.4.24, =1.1.0, =0.2.0, =0.1.3...

agentic-ai-engineering-course (>=0.4.6, <=1.0.0), iflow-mcp-divar-ir-sourcegraph-mcp (0.1.0) +7 more potentially affected by CVE-2025-64340 via fastmcp (2.12.0)

fastmcp PYPI version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentic-ai-engineering-course =0.4.6, =0.2.0, =0.1.0, =0.1.3, =1.2.0, =1.2.1 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

ai-application-gateway (>=0.1.1, <=0.1.5), ai-universe-mail (>=0.1.0, <=0.1.1) +28 more potentially affected by CVE-2025-64340 via fastmcp (2.13.0.2)

fastmcp PYPI version 2.13.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-application-gateway =0.1.1, =0.1.0, =0.2.11, =0.21.6, =0.1.5, =0.1.0, =0.0.92, =0.4.4, =0.4.0, =0.1.5, =1.0.0, =1.0.0, =1.0.1 -...

complexipy-mcp (>=0.1.0, <=0.1.1), gyy-mcp (>=1.0.0, <=1.1.2) +19 more potentially affected by CVE-2025-64340 via fastmcp (2.14.2)

fastmcp PYPI version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - complexipy-mcp =0.1.0, =1.0.0, =1.1.2 - oracle-oci-cloud-guard-mcp-server 1.1.2 - oracle-oci-cloud-mcp-server 1.1.2 -...

alation-ai-agent-mcp (>=0.7.0, <=0.12.0), carton-mcp (>=0.1.80, <=0.1.83) +11 more potentially affected by CVE-2025-64340 via fastmcp (2.9.0)

fastmcp PYPI version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp =0.7.0, =0.1.80, =0.1.0, =1.0.17, =0.1.24, =0.1.2, =1.7.1, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2025-64340 Source advisory...

CVE-2025-64340

creationtimestamp| type| source ---|---|--- 2026-03-31 14:43:20+00:00| published-proof-of-concept| https://github.com/PrefectHQ/fastmcp/security/advisories/GHSA-m8x7-r2rg-vh5g 2026-04-03 16:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim5wegy432z...