fastmcp-slim vulnerabilities (PyPI)

2 vulnerabilities.

• fastmcp-slim PyPI FastMCP: Post-transform component authorization is skipped on direct calls GHSA-7xgj-8392-5q4r Fix available 6.8 MediumOctober 23, 2026
• fastmcp-slim PyPI FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server GHSA-vqqp-x5qm-5qp4 Fix available 5.9 MediumOctober 23, 2026