9 matches found
Malicious code in solscan (PyPI)
--- Credit: OpenSSF source...
fastmcp-gsuite (>=1.0.0b0, <=1.1.0), iflow-mcp-larkagentx (0.1.0) +4 more potentially affected by CVE-2026-27124 via fastmcp (2.1.2)
fastmcp PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - fastmcp-gsuite =1.0.0b0, =0.2.0, =1.0.0b2, =1.0.0b7 Source cves: CVE-2026-27124 Source advisory: OSV:PYSEC-2026-2476...
fastmcp-gsuite (>=1.0.0b0, <=1.1.0), iflow-mcp-larkagentx (0.1.0) +4 more potentially affected by CVE-2025-64340 via fastmcp (2.1.2)
fastmcp PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - fastmcp-gsuite =1.0.0b0, =0.2.0, =1.0.0b2, =1.0.0b7 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...
fastmcp-gsuite (>=1.0.0b0, <=1.1.0), iflow-mcp-larkagentx (0.1.0) +4 more potentially affected by CVE-2026-32871 via fastmcp (2.1.2)
fastmcp PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - fastmcp-gsuite =1.0.0b0, =0.2.0, =1.0.0b2, =1.0.0b7 Source cves: CVE-2026-32871 Source advisory: OSV:PYSEC-2026-338...
fastmcp-gsuite (>=1.0.0b0, <=1.1.0), iflow-mcp-larkagentx (0.1.0) +4 more potentially affected by CVE-2026-32871 via fastmcp (2.1.2)
fastmcp PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - fastmcp-gsuite =1.0.0b0, =0.2.0, =1.0.0b2, =1.0.0b7 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...
fastmcp-gsuite (>=1.0.0b0, <=1.1.0), iflow-mcp-larkagentx (0.1.0) +4 more potentially affected by CVE-2026-27124 via fastmcp (2.1.2)
fastmcp PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - fastmcp-gsuite =1.0.0b0, =0.2.0, =1.0.0b2, =1.0.0b7 Source cves: CVE-2026-27124 Source advisory: OSV:GHSA-RWW4-4W9C-7733...
fastmcp-gsuite (>=1.0.0b0, <=1.1.0), iflow-mcp-larkagentx (0.1.0) +4 more potentially affected by CVE-2025-64340 via fastmcp (2.1.2)
fastmcp PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - fastmcp-gsuite =1.0.0b0, =0.2.0, =1.0.0b2, =1.0.0b7 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...
