Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
@frontmcp
Sdk
@frontmcp Sdk vulnerabilities
agentfront
frontmcp
,
frontmcp
mcp-from-openapi
,
@frontmcp
adapters
+3 more
+5 more
FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
CVE-2026-39885
Fix available
7.5
High
April 8, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open