@frontmcp/adapters (>=1.0.4, <=1.10.6), @frontmcp/edge (>=1.9.2, <=1.10.6) +2 more potentially affected by CVE-2026-115751 via mcp-from-openapi (>=2.3.0, <=2.8.0)

mcp-from-openapi NPM version =2.3.0, =1.0.4, =1.9.2, =0.0.1, =0.1.0, =0.16.0 Source cves: CVE-2026-115751 Source advisory: MEND:CVE-2026-115751...

@frontmcp/adapters (>=1.5.0, <=1.10.6), @frontmcp/edge (>=1.9.2, <=1.10.6) +2 more potentially affected by CVE-2026-115750 via mcp-from-openapi (>=2.5.0, <=2.8.0)

mcp-from-openapi NPM version =2.5.0, =1.5.0, =1.9.2, =1.5.0, =0.1.0, =0.16.0 Source cves: CVE-2026-115750 Source advisory: MEND:CVE-2026-115750...

CVE-2026-59973

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

CVE-2026-59973 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

CVE-2026-59973

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

@frontmcp/adapters (>=1.0.4, <=1.5.0-rc.1), @frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.0-rc.1) potentially affected by CVE-2026-59973 via mcp-from-openapi (>=2.3.0, <=2.4.0)

mcp-from-openapi NPM version =2.3.0, =1.0.4, =0.0.1, =1.5.0-rc.1 Source cves: CVE-2026-59973 Source advisory: MEND:CVE-2026-59973...

CVE-2026-59973

CVE-2026-59973 is a bypass of a prior SSRF fix in FrontMCP 's OpenAPI adapter. The affected packages are mcp-from-openapi (2.3.0–2.5.0) and frontmcp / @frontmcp/adapters (1.2.1–1.5.0). The loadOpenAPISpec() function forwards untrusted OpenAPI URLs to OpenAPIToolGenerator.fromURL() / fromJSON(), w...

CVE-2026-59973 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

EUVD-2026-78782

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

@frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.0-rc.1) potentially affected by CVE-2026-59973 via @frontmcp/adapters (>=1.0.4, <=1.5.0-rc.1)

@frontmcp/adapters NPM version =1.0.4, =0.0.1, =1.5.0-rc.1 Source cves: CVE-2026-59973 Source advisory: MEND:CVE-2026-59973...

CVE-2026-59973: Server-Side Request Forgery (SSRF)

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

@frontmcp/adapters (>=1.0.4, <=1.5.0-rc.1), @frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.0-rc.1) potentially affected by CVE-2026-39885 +1 more via mcp-from-openapi (>=2.3.0, <=2.4.0)

mcp-from-openapi NPM version =2.3.0, =1.0.4, =0.0.1, =1.5.0-rc.1 Source cves: CVE-2026-39885, CVE-2026-59973 Source advisory: GHSA-65H7-9WRW-629C...

@frontmcp/adapters (>=1.0.4, <=1.5.0-rc.1), @frontmcp/plugin-skilled-openapi (>=0.0.1, <=1.5.0-rc.1) potentially affected by CVE-2026-39885 +1 more via mcp-from-openapi (>=2.3.0, <=2.4.0)

mcp-from-openapi NPM version =2.3.0, =1.0.4, =0.0.1, =1.5.0-rc.1 Source cves: CVE-2026-39885, CVE-2026-59973 Source advisory: OSV:GHSA-65H7-9WRW-629C...

@frontmcp/plugin-skilled-openapi (>=1.2.1, <=1.5.0-rc.1) potentially affected by CVE-2026-39885 +1 more via @frontmcp/adapters (>=1.2.1, <=1.5.0-rc.1)

@frontmcp/adapters NPM version =1.2.1, =1.2.1, =1.5.0-rc.1 Source cves: CVE-2026-39885, CVE-2026-59973 Source advisory: GHSA-65H7-9WRW-629C...

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm mcp-from-openapi versions = 2.3.0, 2.5.0...

GHSA-65H7-9WRW-629C FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

@frontmcp/plugin-skilled-openapi (>=1.2.1, <=1.5.0-rc.1) potentially affected by CVE-2026-39885 +1 more via @frontmcp/adapters (>=1.2.1, <=1.5.0-rc.1)

@frontmcp/adapters NPM version =1.2.1, =1.2.1, =1.5.0-rc.1 Source cves: CVE-2026-39885, CVE-2026-59973 Source advisory: OSV:GHSA-65H7-9WRW-629C...

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm frontmcp versions = 1.2.1, 1.5.0...

PT-2026-90548

Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI external $ref dereferencing, but the latest patched dependency mcp-from-openapi 2.3.0 still makes backend-origin requests to loopback when the target is reached through hostname...