7846 matches found
alation-ai-agent-mcp (1.0.0rc3), codesecure-mcp (1.0.0b9) +4 more potentially affected by CVE-2026-32871 via fastmcp (2.14.0)
fastmcp PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp 1.0.0rc3 - codesecure-mcp 1.0.0b9 - korean-stat-mcp 0.1.4 - mcp-proxy-for-aws =1.1.5, =0.3.0, =0.5.0 - seclab-taskflow-agent...
agent-mcp-server (0.0.4.0), beads-mcp (>=0.30.1, <=0.47.1) +10 more potentially affected by CVE-2026-32871 via fastmcp (2.14.1)
fastmcp PYPI version 2.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - agent-mcp-server 0.0.4.0 - beads-mcp =0.30.1, =1.36.5, =0.2.0, =0.0.3, =0.11.0, =0.1.14, =8.5.0, =0.3.1, =0.2.0, =0.2.6 Source cves: CVE-2026-328...
iflow-mcp-erickjtorres-flutter-surf-mcp (0.1.0), one-prompt-agents (>=0.0.1, <=0.0.3) potentially affected by CVE-2026-32871 via fastmcp (2.3.4)
fastmcp PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-erickjtorres-flutter-surf-mcp 0.1.0 - one-prompt-agents =0.0.1, =0.0.3 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
iflow-mcp-kdoronin-figma-mcp (>=0.1.0, <=0.1.1), rootly-mcp-server (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-32871 via fastmcp (2.4.0)
fastmcp PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-kdoronin-figma-mcp =0.1.0, =2.0.0, =2.0.1 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
aws-athena-mcp (1.0.1), fabric-lakehouse-mcp (>=0.3.1, <=0.3.15) +7 more potentially affected by CVE-2026-32871 via fastmcp (2.5.2)
fastmcp PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aws-athena-mcp 1.0.1 - fabric-lakehouse-mcp =0.3.1, =0.1.17, =0.32.2, =0.0.1, =0.1.6, =0.1.9 Source cves: CVE-2026-32871 Source advisory:...
mcp-server-flockx (0.1.0), tumee-codeguard (>=0.26.0, <=0.26.1) potentially affected by CVE-2026-32871 via fastmcp (2.6.0)
fastmcp PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mcp-server-flockx 0.1.0 - tumee-codeguard =0.26.0, =0.26.1 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
alibaba-cloud-application-management-mcp-server (>=0.1.0, <=1.0.4), alibaba-cloud-ops-mcp-server (>=0.9.2, <=0.9.27) +19 more potentially affected by CVE-2026-32871 via fastmcp (2.8.0)
fastmcp PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alibaba-cloud-application-management-mcp-server =0.1.0, =0.9.2, =0.0.1, =0.2.2, =0.2.0, =2.0.5, =2.0.7, =2.0.7, =0.9.8, =2.0.0, =0.2.0, =0.3.0 and...
ai-code-review (>=2.0.0.dev1, <=3.1.2), ai-cr (>=2.0.0.dev1, <=3.1.2) +24 more potentially affected by CVE-2026-32871 via fastmcp (2.8.1)
fastmcp PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ai-code-review =2.0.0.dev1, =2.0.0.dev1, =4.0.0.dev21, =0.0.1, =0.2.0, =2.0.0.dev1, =2.0.0.dev1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more...
mcp-instana (>=0.1.1, <=0.3.1) potentially affected by CVE-2026-32871 via fastmcp (2.10.3)
fastmcp PYPI version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - mcp-instana =0.1.1, =0.3.1 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
iflow-mcp-redhat-data-and-ai-template-mcp-server (0.1.0), mcp-server-datahub (>=0.3.0, <=0.3.4) +2 more potentially affected by CVE-2026-32871 via fastmcp (2.10.4)
fastmcp PYPI version 2.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-redhat-data-and-ai-template-mcp-server 0.1.0 - mcp-server-datahub =0.3.0, =0.1.0, =0.2.0 Source cves: CVE-2026-32871 Source advisory:...
beads-mcp (>=0.24.0, <=0.30.0), biocontext-kb (0.2.1) +13 more potentially affected by CVE-2026-32871 via fastmcp (2.13.1)
fastmcp PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - beads-mcp =0.24.0, =0.11.0, =0.1.0.8.11, =0.5.0, =8.2.3, =0.1.4, =0.2.1 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
closelink-mcp (1.1.7) potentially affected by CVE-2026-32871 via fastmcp (2.3.1)
fastmcp PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - closelink-mcp 1.1.7 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
excel-mcp-server has a Path Traversal issue
SummaryA path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode the documented way to use this server remotely, an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on t...
PYSEC-2026-331 excel-mcp-server has a Path Traversal issue
Summary A path traversal vulnerability exists in excel-mcp-server versions up to and including 0.1.7. When running in SSE or Streamable-HTTP transport mode the documented way to use this server remotely, an unauthenticated attacker on the network can read, write, and overwrite arbitrary files on...
mcp-kubernetes-server has an OS Command Injection vulnerability
feiskyer/mcp-kubernetes-server through 0.1.11 allows OS command injection via the /mcp/kubectl endpoint. The handler constructs a shell command with user-supplied arguments and executes it with subprocess using shell=True, enabling injection through shell metacharacters e.g., ;, &&, $, even when...
PYSEC-2026-409 mcp-kubernetes-server has an OS Command Injection vulnerability
feiskyer/mcp-kubernetes-server through 0.1.11 allows OS command injection via the /mcp/kubectl endpoint. The handler constructs a shell command with user-supplied arguments and executes it with subprocess using shell=True, enabling injection through shell metacharacters e.g., ;, &&, $, even when...
CVE-2026-13524
A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of the component MCP OAuth Local Callback Server. The manipulation of the argument code leads to improper authorization. Th...
CVE-2026-13524
A security vulnerability has been detected in CherryHQ cherry-studio up to 1.9.6. This vulnerability affects unknown code of the file src/main/services/mcp/oauth/callback.ts of the component MCP OAuth Local Callback Server. The manipulation of the argument code leads to improper authorization. Th...
