Skip to content
OpenAdvisories

Package · PyPI

fastmcp

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-32871

    FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

    FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests …

    PrefectHQ fastmcp fastmcp PyPI