CVE-2025-66416

creationtimestamp| type| source ---|---|--- 2025-12-27 04:21:10+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mawxfiwavy2f 2026-05-05 01:21:55+00:00| seen| https://gist.github.com/limcheekin/49ca8210543fa6a982930a55e27a261c...

GHSA-RCFX-77HG-W2WV FastMCP updated to MCP 1.23+ due to CVE-2025-66416

There was a recent CVE report on MCP: https://nvd.nist.gov/vuln/detail/CVE-2025-66416. FastMCP does not use any of the affected components of the MCP SDK directly. However, FastMCP versions prior to 2.14.0 did allow MCP SDK versions 1.23 that were vulnerable to CVE-2025-66416. Users should upgrad...

FastMCP updated to MCP 1.23+ due to CVE-2025-66416

There was a recent CVE report on MCP: https://nvd.nist.gov/vuln/detail/CVE-2025-66416. FastMCP does not use any of the affected components of the MCP SDK directly. However, FastMCP versions prior to 2.14.0 did allow MCP SDK versions 1.23 that were vulnerable to CVE-2025-66416. Users should upgrad...

CVE-2025-66416 vulnerabilities

Vulnerabilities for packages: semgrep, open-webui...

1xn-vmcp (>=0.5.2 <=0.6.1), a2c-smcp (>=0.1.1rc0 <=0.1.5) +396 more potentially affected by CVE-2025-66416 via mcp (>=1.0.0 <=1.22.0)

mcp PYPI version =1.0.0, =0.5.2, =0.1.1rc0, =0.7.2, =1.1.0, =1.1.0, =1.0.0, =1.0.0, =0.4.0, =0.0.19, =1.0.0, =3.2.0, =3.2.0, =4.2.2, =4.3.3 and more Source cves: CVE-2025-66416 Source advisory: SNYK:PYTHON-MCP-14171912...