aenvironment (0.1.7rc1), ai-code-review (>=3.2.0, <=3.3.0) +25 more potentially affected by CVE-2025-64340 via fastmcp (2.10.6)

fastmcp PYPI version 2.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aenvironment 0.1.7rc1 - ai-code-review =3.2.0, =3.2.0, =4.2.2, =0.1.1.dev2, =0.0.4, =3.2.0, =0.1.1a1, =0.1.1a2 and more Source cves: CVE-2025-643...

basic-memory (>=0.16.3, <=0.18.5), idb-mcp (>=0.0.1, <=0.1.2) +10 more potentially affected by CVE-2025-64340 via fastmcp (2.12.3)

fastmcp PYPI version 2.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - basic-memory =0.16.3, =0.0.1, =0.1.0, =3.5.12, =1.0.2, =1.1.1, =1.0.1, =1.0.1, =0.3.0rc0, =0.1.0a32, =0.1.3, =0.1.4 Source cves: CVE-2025-64340...

helm-ai (>=0.1.0, <=0.2.5), iflow-mcp-behinduall-wiki-js-mcp (1.0.0) +4 more potentially affected by CVE-2025-64340 via fastmcp (0.1.0)

fastmcp PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - helm-ai =0.1.0, =0.1.0, =0.1.1, =0.1.12 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...

FastMCP has a Command Injection vulnerability - Gemini CLI

Server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are...

ai-xone-mcp-workflow (>=0.0.2a1, <=0.0.2a5), axians-mcp (>=0.1.0, <=1.2.2) +10 more potentially affected by CVE-2025-64340 via fastmcp (2.3.5)

fastmcp PYPI version 2.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-xone-mcp-workflow =0.0.2a1, =0.1.0, =0.1.0, =0.1.0a0, =0.1.20, =0.10.5, =0.0.0, =0.0.1, =1.0.0 Source cves: CVE-2025-64340 Source advisory:...

oterm (0.12.0) potentially affected by CVE-2025-64340 via fastmcp (2.2.10)

fastmcp PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - oterm 0.12.0 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...

PYSEC-2026-2474 FastMCP OAuth Proxy token reuse across MCP servers

While testing the OAuth Proxy implementation, it was noticed that the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for this MCP server, the token is issued for the baseurl passed to...

helm-ai (>=0.1.0, <=0.2.5), iflow-mcp-behinduall-wiki-js-mcp (1.0.0) +4 more potentially affected by CVE-2025-69196 via fastmcp (0.1.0)

fastmcp PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - helm-ai =0.1.0, =0.1.0, =0.1.1, =0.1.12 Source cves: CVE-2025-69196 Source advisory: OSV:PYSEC-2026-2474...

grizabella (>=0.1.0b1, <=0.1.1b1), pypi-query-mcp-server (0.1.0) potentially affected by CVE-2025-69196 via fastmcp (0.2.0)

fastmcp PYPI version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - grizabella =0.1.0b1, =0.1.1b1 - pypi-query-mcp-server 0.1.0 Source cves: CVE-2025-69196 Source advisory: OSV:PYSEC-2026-2474...

mcp-contract-builder (>=0.0.1, <=0.0.7), mcp-contract-executor (>=0.0.1, <=0.0.7) +2 more potentially affected by CVE-2025-69196 via fastmcp (0.3.5)

fastmcp PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mcp-contract-builder =0.0.1, =0.0.1, =0.1.48, =0.1.0, =0.1.3 Source cves: CVE-2025-69196 Source advisory: OSV:PYSEC-2026-2474...

code-review-graph (>=1.8.0, <=2.2.3.1), iflow-mcp-automateyournetwork-aci-mcp (>=0.1.1, <=0.1.4) +4 more potentially affected by CVE-2025-69196 via fastmcp (1.0.0)

fastmcp PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - code-review-graph =1.8.0, =0.1.1, =0.1.8, =0.1.0, =0.1.0, =0.3.0 - repomind 1.8.4 Source cves: CVE-2025-69196 Source advisory: OSV:PYSEC-2026-2474...

agentfetch-mcp (>=1.0.0, <=1.0.1), constitute-mcp (>=0.1.18, <=0.1.27) +31 more potentially affected by CVE-2025-69196 via fastmcp (0.4.1)

fastmcp PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentfetch-mcp =1.0.0, =0.1.18, =2.0.2, =1.0.0, =0.1.0, =0.1.41, =1.0.0, =1.0.1 - iflow-mcp-philschmid-code-sandbox-mcp 0.1.0 -...

aa-rag (0.4.3), aden-hive (>=1.0.1, <=1.0.8) +374 more potentially affected by CVE-2025-69196 via fastmcp (>=2.0.0, <=2.14.1)

fastmcp PYPI version =2.0.0, =1.0.1, =1.0.2, =0.5.0, =0.4.6, =1.8.0, =0.1.1, =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.1.0, =0.0.2a1, =0.0.2a5 and more Source cves: CVE-2025-69196 Source advisory: OSV:PYSEC-2026-2474...

PT-2026-59142

Server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are...

Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

DescriptionThe Model Context Protocol MCP Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication using FastMCP with streamable HTTP or SSE transport, and has not configured...

FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name

SummaryA command-injection vulnerability lets any attacker who can influence the servername field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp install cursor Details1. generatecursordeeplinkservername, … embeds servername verbatim in a cursor://…?name= query string.2...

PYSEC-2026-1364 FastMCP vulnerable to reflected XSS in client's callback page

Summary While setting up an oauth client, it was noticed that the callback page hosted by the client during the flow embeds user-controlled content without escaping or sanitizing it. This leads to a reflected Cross-Site-Scripting vulnerability. Details The affected code is located in...

helm-ai (>=0.1.0, <=0.2.5), iflow-mcp-behinduall-wiki-js-mcp (1.0.0) +4 more potentially affected by CVE-2025-62800 via fastmcp (0.1.0)

fastmcp PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - helm-ai =0.1.0, =0.1.0, =0.1.1, =0.1.12 Source cves: CVE-2025-62800 Source advisory: OSV:PYSEC-2026-1364...

agentfetch-mcp (>=1.0.0, <=1.0.1), constitute-mcp (>=0.1.18, <=0.1.27) +31 more potentially affected by CVE-2025-62800 via fastmcp (0.4.1)

fastmcp PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentfetch-mcp =1.0.0, =0.1.18, =2.0.2, =1.0.0, =0.1.0, =0.1.41, =1.0.0, =1.0.1 - iflow-mcp-philschmid-code-sandbox-mcp 0.1.0 -...

code-review-graph (>=1.8.0, <=2.2.3.1), iflow-mcp-automateyournetwork-aci-mcp (>=0.1.1, <=0.1.4) +4 more potentially affected by CVE-2025-62800 via fastmcp (1.0.0)

fastmcp PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - code-review-graph =1.8.0, =0.1.1, =0.1.8, =0.1.0, =0.1.0, =0.3.0 - repomind 1.8.4 Source cves: CVE-2025-62800 Source advisory: OSV:PYSEC-2026-1364...