Skip to content
Jlowin vulnerabilities
Newest
-
jlowin fastmcp, red hat openshift ai (rhoai), satellite 6.18 +2 more
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
CVE-2026-32871
Fix available
10.0 Critical
-
jlowin fastmcp
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
CVE-2026-27124
Fix available
8.2 High
-
jlowin fastmcp
FastMCP has a Command Injection vulnerability - Gemini CLI
CVE-2025-64340
Fix available
6.7 Medium
-
jlowin fastmcp, red hat developer hub, openshift ai (rhoai) +1 more +3 more
FastMCP OAuth Proxy token reuse across MCP servers
CVE-2025-69196
Fix available
7.4 High
-
jlowin fastmcp
FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
CVE-2025-62801
Fix available
5.4 Medium
-
jlowin fastmcp
FastMCP vulnerable to reflected XSS in client's callback page
CVE-2025-62800
Fix available
5.3 Medium