Jlowin Fastmcp

5 CVEs affecting Jlowin Fastmcp. Latest disclosed: 2026-04-03. Critical: 0, High: 0.

Top CVEs affecting Jlowin Fastmcp
CVESeverityScorePublishedSummary
CVE-2025-64340Medium6.72026-04-03FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g., &) can cause comma…
CVE-2026-271242026-04-03FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, while testing the GitHubProvider OAuth integration, which allows authe…
CVE-2025-691962026-03-16FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted…
CVE-2025-628012025-10-28FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0, a command-injection vulnerability lets any attacker who can influenc…
CVE-2025-628002025-10-28FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0 have a reflected cross-site scripting vulnerability in the OAuth clie…