All products

@frontmcp/adapters

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fixCVE-2026-59973 · GHSA-65H7-9WRW-629C @frontmcp/adaptersfrontmcp npm High Fix reported
FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change pollerGHSA-8Q49-2H5H-434X @frontmcp/adapters npm Medium Fix reported
mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI SpecificationsCVE-2026-39885 · GHSA-V6PH-XCQ9-QXXJ @frontmcp/adapters@frontmcp/sdk npm High Fix reported