MC
Product
mcp-from-openapi
3
CVEs
0
On KEV
8.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 0Low 2
Watch
Add mcp-from-openapi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59973 | 8.5 | Sep 15 | mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi Affected: < 2.5.0 |
| CVE-2026-115751 New | 3.7 | Oct 23 | mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname Affected: 2.2.0 before 2.9.0 |
| CVE-2026-115750 New | 3.7 | Oct 23 | mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects Affected: 2.5.0 before 2.9.0 |
Showing 3