closelink-mcp (1.1.7) potentially affected by CVE-2025-64340 via fastmcp (2.3.1)

fastmcp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - closelink-mcp 1.1.7 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

alation-ai-agent-mcp (>=1.0.0rc1, <=1.0.0rc2), atlan-mcp-server (>=0.2.7, <=0.2.10) +6 more potentially affected by CVE-2025-64340 via fastmcp (2.11.0)

fastmcp PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp =1.0.0rc1, =0.2.7, =0.0.1b0, =0.0.20b0 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

iflow-mcp-winautowx (1.0.0) potentially affected by CVE-2025-64340 via fastmcp (2.0.0)

fastmcp PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-winautowx 1.0.0 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

FastMCP has a Command Injection vulnerability - Gemini CLI

Server names containing shell metacharacters e.g., & can cause command injection on Windows when passed to fastmcp install claude-code or fastmcp install gemini-cli. These install paths use subprocess.run with a list argument, but on Windows the target CLIs often resolve to .cmd wrappers that are...

ariadne-sensemaking (>=0.1.0, <=0.1.2), atlan-mcp-server (0.3.1) +5 more potentially affected by CVE-2025-64340 via fastmcp (2.13.2)

fastmcp PYPI version 2.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ariadne-sensemaking =0.1.0, =1.0.35, =0.5.33, =0.5.34 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

bigquery-mcp (>=0.1.4, <=0.1.5), cowmcpservice (0.1.0) +32 more potentially affected by CVE-2025-64340 via fastmcp (2.13.0)

fastmcp PYPI version 2.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.4, =2.1.0, =2.1.0, =2.1.0, =0.2.7, =1.0.0, =1.0.0, =3.2.18, =0.12.0, =0.1.0.8, =0.6.2, =2.12.0, =2.15.0 and more Source cves:...

cnry-mcp-server-qdrant (>=0.0.2, <=0.8.3), mad-mcp-qdrant (>=1.1.3, <=1.9.3) +4 more potentially affected by CVE-2025-64340 via fastmcp (2.7.0)

fastmcp PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - cnry-mcp-server-qdrant =0.0.2, =1.1.3, =0.8.1, =0.8.1.1 - mcp-server-qdrant-openai 0.8.1 Source cves: CVE-2025-64340 Source advisory:...

helm-ai (>=0.1.0, <=0.2.5), iflow-mcp-behinduall-wiki-js-mcp (1.0.0) +4 more potentially affected by CVE-2025-64340 via fastmcp (0.1.0)

fastmcp PYPI version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - helm-ai =0.1.0, =0.1.0, =0.1.1, =0.1.12 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

acpx-teams (0.1.0), arifos (>=2026.2.22, <=2026.4.16) +61 more potentially affected by CVE-2025-64340 via fastmcp (>=3.0.0b1, <=3.1.1)

fastmcp PYPI version =3.0.0b1, =2026.2.22, =2026.3.13, =1.0.0, =0.56.0, =0.1.0, =0.3.2, =0.2.0, =0.3.0, =1.1.0, =0.0.1, =0.1.0, =0.6.1, =0.6.12 - finam-mcp-server 0.2.0 and more Source cves: CVE-2025-64340 Source advisory: SNYK:PYTHON-FASTMCP-15871029...

beads-mcp (>=0.50.0, <=0.55.4), candlekeep (>=0.1.0, <=2.1.0) +10 more potentially affected by CVE-2025-64340 via fastmcp (2.14.5)

fastmcp PYPI version 2.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.50.0, =0.1.0, =0.20.0, =2.8.0, =1.49.0, =1.4.0, =0.1.3, =1.3.2, =1.2.0, =0.1.0, =0.9.33, =0.9.41 Source cves: CVE-2025-64340 Source...

cratedb-mcp (0.0.3), figma-to-compose-mcp (>=0.1.0, <=1.1.1) +7 more potentially affected by CVE-2025-64340 via fastmcp (2.6.1)

fastmcp PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - cratedb-mcp 0.0.3 - figma-to-compose-mcp =0.1.0, =0.1.0, =0.1.0, =0.0.2, =1.0.0, =3.0.0, =3.0.2 Source cves: CVE-2025-64340 Source advisory:...

bigquery-mcp (>=0.1.1, <=0.1.3), codearkt (>=0.0.1, <=0.0.3) +8 more potentially affected by CVE-2025-64340 via fastmcp (2.11.2)

fastmcp PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.1, =0.0.1, =0.1.1, =0.2.5, =0.1.17, =0.1.0.3, =1.0.1, =0.2.2, =0.1.0, =2.1.22 Source cves: CVE-2025-64340 Source advisory:...

adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2025-64340 via fastmcp (2.3.3)

fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

iflow-mcp-erickjtorres-flutter-surf-mcp (0.1.0), one-prompt-agents (>=0.0.1, <=0.0.3) potentially affected by CVE-2025-64340 via fastmcp (2.3.4)

fastmcp PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-erickjtorres-flutter-surf-mcp 0.1.0 - one-prompt-agents =0.0.1, =0.0.3 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-V...

beads-mcp (>=0.47.2, <=0.49.1), fs-mcp (>=1.6.0, <=1.47.3) +4 more potentially affected by CVE-2025-64340 via fastmcp (2.14.3)

fastmcp PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.47.2, =1.6.0, =1.0.0, =1.0.1, =0.2.5, =0.2.6 - zap-ai 0.4.0 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

acpx-teams (0.1.0), arifos (>=2026.2.22, <=2026.4.16) +61 more potentially affected by CVE-2025-64340 via fastmcp (>=3.0.0b1, <=3.1.1)

fastmcp PYPI version =3.0.0b1, =2026.2.22, =2026.3.13, =1.0.0, =0.56.0, =0.1.0, =0.3.2, =0.2.0, =0.3.0, =1.1.0, =0.0.1, =0.1.0, =0.6.1, =0.6.12 - finam-mcp-server 0.2.0 and more Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

iflow-mcp-kdoronin-figma-mcp (>=0.1.0, <=0.1.1), rootly-mcp-server (>=2.0.0, <=2.0.1) potentially affected by CVE-2025-64340 via fastmcp (2.4.0)

fastmcp PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-kdoronin-figma-mcp =0.1.0, =2.0.0, =2.0.1 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

alation-ai-agent-mcp (1.0.0rc3), codesecure-mcp (1.0.0b9) +4 more potentially affected by CVE-2025-64340 via fastmcp (2.14.0)

fastmcp PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp 1.0.0rc3 - codesecure-mcp 1.0.0b9 - korean-stat-mcp 0.1.4 - mcp-proxy-for-aws =1.1.5, =0.3.0, =0.5.0 - seclab-taskflow-agent...

mcp-contract-builder (>=0.0.1, <=0.0.7), mcp-contract-executor (>=0.0.1, <=0.0.7) +2 more potentially affected by CVE-2025-64340 via fastmcp (0.3.5)

fastmcp PYPI version 0.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mcp-contract-builder =0.0.1, =0.0.1, =0.1.48, =0.1.0, =0.1.3 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...

agentfetch-mcp (>=1.0.0, <=1.0.1), constitute-mcp (>=0.1.18, <=0.1.27) +31 more potentially affected by CVE-2025-64340 via fastmcp (0.4.1)

fastmcp PYPI version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agentfetch-mcp =1.0.0, =0.1.18, =2.0.2, =1.0.0, =0.1.0, =0.1.41, =1.0.0, =1.0.1 - iflow-mcp-philschmid-code-sandbox-mcp 0.1.0 -...