FastMCP updated to MCP 1.23+ due to CVE-2025-66416

Mô tả

Tham khảo

• jlowin/fastmcp security advisory · WEB
• modelcontextprotocol/python-sdk security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-66416 · ADVISORY
• jlowin/fastmcp · PACKAGE

Lỗ hổng khác của fastmcp

• GHSA-7xgj-8392-5q4rTRUNG BÌNH 6.8FastMCP: Post-transform component authorization is skipped on direct calls
• GHSA-vqqp-x5qm-5qp4TRUNG BÌNH 5.9FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authori…
• CVE-2026-27124TRUNG BÌNH 6.1FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, while testing the GitHubProvider OAuth integration,…
• CVE-2025-64340CAO 7.8FastMCP is the standard framework for building MCP applications. Prior to version 3.2.0, server names containing shell metacharacters (e.g.,…
• CVE-2026-32871NGHIÊM TRỌNG 10.0FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to …