JL
Vendor
jlowin
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27124 | FA fastmcp jlowin | 6.1 | Apr 3 | FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities |
| CVE-2025-64340 | FA fastmcp jlowin | 7.8 | Apr 3 | FastMCP has a Command Injection vulnerability - Gemini CLI |
| CVE-2026-32871 | FA Fastmcp Jlowin | 10.0 | Apr 2 | FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability |
| CVE-2025-69196 | FA fastmcp jlowin | 6.5 | Mar 16 | FastMCP OAuth Proxy token reuse across MCP servers |
| CVE-2025-62801 | FA fastmcp jlowin | 7.8 | Oct 28 | FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name |
| CVE-2025-62800 | FA fastmcp jlowin | 6.1 | Oct 28 | FastMCP vulnerable to reflected XSS in client's callback page |
