alation-ai-agent-mcp (1.0.0rc3), codesecure-mcp (1.0.0b9) +4 more potentially affected by CVE-2026-27124 via fastmcp (2.14.0)

fastmcp PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp 1.0.0rc3 - codesecure-mcp 1.0.0b9 - korean-stat-mcp 0.1.4 - mcp-proxy-for-aws =1.1.5, =0.3.0, =0.5.0 - seclab-taskflow-agent...

alation-ai-agent-mcp (1.0.0rc3), codesecure-mcp (1.0.0b9) +4 more potentially affected by CVE-2025-64340 via fastmcp (2.14.0)

fastmcp PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - alation-ai-agent-mcp 1.0.0rc3 - codesecure-mcp 1.0.0b9 - korean-stat-mcp 0.1.4 - mcp-proxy-for-aws =1.1.5, =0.3.0, =0.5.0 - seclab-taskflow-agent...

Malware in @jaswanthlanka/mcp-proxy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...