@aumoai/mcp-data-analyst (>=0.1.0 <=0.2.8-a), @geobio/code_execution_server (>=0.2.0 <=0.2.1) +35 more potentially affected by CVE-2026-39313 via mcp-framework (>=0.1.27 <=0.2.2)

mcp-framework NPM version =0.1.27, =0.1.0, =0.2.0, =1.0.11, =0.2.0, =0.2.0, =0.0.1, =0.0.4 and more Source cves: CVE-2026-39313 Source advisory: SNYK:JS-MCPFRAMEWORK-16420257...

CVE-2026-39313

creationtimestamp| type| source ---|---|--- 2026-04-16 11:59:54+00:00| published-proof-of-concept| https://github.com/QuantGeekDev/mcp-framework/security/advisories/GHSA-353c-v8x9-v7c3 2026-04-16 23:18:23+00:00| published-proof-of-concept| Telegram/x6U1CUbtpfWdw00zGhzow4OOkK7AiEHUVbiM6o3SMYH6zs0...