@frontmcp/adapters
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix | @frontmcp/adaptersfrontmcp | npm | High | Fix reported | |
| FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller | @frontmcp/adapters | npm | Medium | Fix reported | |
| mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications | @frontmcp/adapters@frontmcp/sdk | npm | High | Fix reported |

