Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@frontmcp/sdk
@frontmcp/sdk vulnerabilities (npm)
1 vulnerability.
@frontmcp/sdk
npm
FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
CVE-2026-39885
Fix available
7.5
High
April 8, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open