bigquery-mcp (>=0.1.1, <=0.1.3), codearkt (>=0.0.1, <=0.0.3) +8 more potentially affected by CVE-2025-64340 via fastmcp (2.11.2)

fastmcp PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.1, =0.0.1, =0.1.1, =0.2.5, =0.1.17, =0.1.0.3, =1.0.1, =0.2.2, =0.1.0, =2.1.22 Source cves: CVE-2025-64340 Source advisory:...