cve-mcp-server

🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...

CVE-2026-120338 Prefab UI Pyodide sandbox escape to host RCE

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted...

CVE-2026-120338

The prefab-ui library (versions 0.14.0 through 0.20.2 ) contains a sandbox escape vulnerability in its Generative UI feature. The system executes caller-supplied Python code via Pyodide within a Deno subprocess. Because the launcher initializes Deno with unrestricted permissions (--allow-read , -...

CVE-2026-120338 Prefab UI Pyodide sandbox escape to host RCE

Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted...

PT-2026-129211

Name of the Vulnerable Software and Affected Versions AnkiMCP versions prior to 0.21.0 Description AnkiMCP globally disables DNS-rebinding protection in anki mcp server/mcp server.py via TransportSecuritySettings by setting enable dns rebinding protection=False. This affects the default local...

5mghost-rover (>=0.0.1, <=0.0.3), agent-tollgate (1.0.0) +85 more potentially affected by unknown CVE via fastmcp (>=4.0.0, <=4.1.1)

fastmcp PYPI version =4.0.0, =0.0.1, =0.1.2, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =1.1.0, =0.1.0, =0.1.0a1, =0.11.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7XGJ-8392-5Q4R...

5mghost-rover (>=0.0.1, <=0.0.3), agent-tollgate (1.0.0) +92 more potentially affected by unknown CVE via fastmcp-slim (>=4.0.0, <=4.1.1)

fastmcp-slim PYPI version =4.0.0, =0.0.1, =0.1.2, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =1.1.0, =0.1.0, =0.1.27 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7XGJ-8392-5Q4R...

5mghost-rover (>=0.0.1, <=0.0.3), agent-tollgate (1.0.0) +92 more potentially affected by unknown CVE via fastmcp-slim (>=4.0.0, <=4.1.1)

fastmcp-slim PYPI version =4.0.0, =0.0.1, =0.1.2, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =1.1.0, =0.1.0, =0.1.27 and more Source cves: unknown CVE Source advisory: GHSA-7XGJ-8392-5Q4R...

a2cr-mcp (0.1.8), accordance-port (>=0.2.0, <=1.0.0) +184 more potentially affected by unknown CVE via fastmcp-slim (>=3.3.0b1, <=3.4.9)

fastmcp-slim PYPI version =3.3.0b1, =0.2.0, =0.1.0, =0.2.124, =0.0.1, =0.0.1, =0.1.0, =2.3.2, =0.11.1, =2026.6.9, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: GHSA-7XGJ-8392-5Q4R...

GHSA-7XGJ-8392-5Q4R FastMCP: Post-transform component authorization is skipped on direct calls

Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported configurations, a server transform can change the metadata used by a component's authorization policy. Direct lookups previously checked the original component but returned the...

FastMCP: Post-transform component authorization is skipped on direct calls

Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported configurations, a server transform can change the metadata used by a component's authorization policy. Direct lookups previously checked the original component but returned the...

5mghost-rover (>=0.0.1, <=0.0.3), agent-tollgate (1.0.0) +85 more potentially affected by unknown CVE via fastmcp (>=4.0.0, <=4.1.1)

fastmcp PYPI version =4.0.0, =0.0.1, =0.1.2, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =1.1.0, =0.1.0, =0.1.0a1, =0.11.2 and more Source cves: unknown CVE Source advisory: GHSA-7XGJ-8392-5Q4R...

a2cr-mcp (>=0.1.0, <=0.1.8), accordance-port (>=0.2.0, <=1.0.0) +290 more potentially affected by unknown CVE via fastmcp (>=3.0.0, <=3.4.8)

fastmcp PYPI version =3.0.0, =0.1.0, =0.2.0, =0.1.0, =0.2.124, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =1.44.2, =2.3.2, =0.11.1, =0.13.0 and more Source cves: unknown CVE Source advisory: GHSA-7XGJ-8392-5Q4R...

a2cr-mcp (0.1.8), accordance-port (>=0.2.0, <=1.0.0) +184 more potentially affected by unknown CVE via fastmcp-slim (>=3.3.0b1, <=3.4.9)

fastmcp-slim PYPI version =3.3.0b1, =0.2.0, =0.1.0, =0.2.124, =0.0.1, =0.0.1, =0.1.0, =2.3.2, =0.11.1, =2026.6.9, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7XGJ-8392-5Q4R...

a2cr-mcp (>=0.1.0, <=0.1.8), accordance-port (>=0.2.0, <=1.0.0) +290 more potentially affected by unknown CVE via fastmcp (>=3.0.0, <=3.4.8)

fastmcp PYPI version =3.0.0, =0.1.0, =0.2.0, =0.1.0, =0.2.124, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =1.44.2, =2.3.2, =0.11.1, =0.13.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7XGJ-8392-5Q4R...

5mghost-rover (>=0.0.1, <=0.0.3), adeu (>=1.31.0, <=3.0.0) +119 more potentially affected by unknown CVE via fastmcp (>=4.0.0a1, <=4.1.1)

fastmcp PYPI version =4.0.0a1, =0.0.1, =1.31.0, =0.2.0, =0.1.2, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =0.23.0, =0.23.3.dev8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VQQP-X5QM-5QP4...

Insufficiently Protected Credentials

Overview fastmcp-slim is a The dependency-slim FastMCP package. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via ClientCredentialsOAuthProvider when no issuer is configured, because the client does not validate that the authorization server advertised b...

5mghost-rover (>=0.0.1, <=0.0.3), adeu (>=1.31.0, <=3.0.0) +119 more potentially affected by unknown CVE via fastmcp (>=4.0.0a1, <=4.1.1)

fastmcp PYPI version =4.0.0a1, =0.0.1, =1.31.0, =0.2.0, =0.1.2, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =0.23.0, =0.23.3.dev8 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-FASTMCP-21663381...

5mghost-rover (>=0.0.1, <=0.0.3), adeu (>=1.31.0, <=3.0.0) +119 more potentially affected by unknown CVE via fastmcp (>=4.0.0a1, <=4.1.1)

fastmcp PYPI version =4.0.0a1, =0.0.1, =1.31.0, =0.2.0, =0.1.2, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =0.23.0, =0.23.3.dev8 and more Source cves: unknown CVE Source advisory: GHSA-VQQP-X5QM-5QP4...

5mghost-rover (>=0.0.1, <=0.0.3), adeu (>=1.31.0, <=3.0.0) +127 more potentially affected by unknown CVE via fastmcp-slim (>=4.0.0a1, <=4.1.1)

fastmcp-slim PYPI version =4.0.0a1, =0.0.1, =1.31.0, =0.2.0, =0.1.2, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =1.3.3rc20, =1.1.2rc1, =1.3.0rc3 - bailey 0.1.0 and more Source cves: unknown CVE Source advisory: GHSA-VQQP-X5QM-5QP4...