pypi

fastmcp

16 Total advisories

16 Vulnerabilities

0 Malware

Dependency scanning

Check whether fastmcp is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

fastmcp

Vulnerabilities

FastMCP: Post-transform component authorization is skipped on direct calls

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server

FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities

FastMCP OAuth Proxy token reuse across MCP servers

FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities

FastMCP OAuth Proxy token reuse across MCP servers

FastMCP has a Command Injection vulnerability - Gemini CLI

FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name

FastMCP vulnerable to reflected XSS in client's callback page

FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name

FastMCP vulnerable to reflected XSS in client's callback page

FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

FastMCP Auth Integration Allows for Confused Deputy Account Takeover

FastMCP updated to MCP 1.23+ due to CVE-2025-66416

Browse more PyPI advisories

Start Securing