iflow-mcp-kdoronin-figma-mcp (>=0.1.0, <=0.1.1), rootly-mcp-server (>=2.0.0, <=2.0.1) potentially affected by CVE-2025-64340 via fastmcp (2.4.0)

fastmcp PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - iflow-mcp-kdoronin-figma-mcp =0.1.0, =2.0.0, =2.0.1 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...