GHSA-rcfx-77hg-w2wv
NoneCVSS
—
EPSS
—
Published
Dec 26, 2025
CISA due date
—
The record
FastMCP updated to MCP 1.23+ due to CVE-2025-66416
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | fastmcp | 0 | 2.14.0 |
Related vulnerabilities
- GHSA-rj5c-58rq-j5g5 FastMCP vulnerable to windows command injection in FastMCP Cursor installer via… Also affects fastmcp
- GHSA-mxxr-jv3v-6pgc FastMCP vulnerable to reflected XSS in client's callback page Also affects fastmcp
- GHSA-c2jp-c369-7pvx FastMCP Auth Integration Allows for Confused Deputy Account Takeover Also affects fastmcp
- CVE-2025-62800 FastMCP vulnerable to reflected XSS in client's callback page Also affects fastmcp
- CVE-2025-62801 FastMCP vulnerable to windows command injection in FastMCP Cursor installer via… Also affects fastmcp