CVE-2025-62801 FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name

FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection vulnerability lets any attacker who can influence the servername field of an MCP execute arbitrary OS commands on Windows hosts that run fastmcp install cursor. This vulnerability is fix...

Litestar 安全漏洞

Litestar is a powerful, flexible but stubborn ASGI framework open-sourced by Litestar. A security vulnerability exists in Litestar versions prior to 2.13.0 that stems from the lack of a default limit on the total size of the request body, allowing an attacker to upload arbitrarily large files and...

PT-2022-4370 · Unknown · Greenlight

Name of the Vulnerable Software and Affected Versions: Greenlight versions prior to 2.13.0 Description: The issue is related to an open redirect vulnerability in the Login page of Greenlight, which is an end-user interface for BigBlueButton servers. This vulnerability is due to the unchecked valu...