Log in Start free

@frontmcp

Products

ProductCVEsExploitedLatest
adapters2–Sep 15, 2026
mcp-from-openapi1–Apr 8, 2026
sdk1–Apr 8, 2026

Exploited and recent CVEs

  • CVE-2026-59973 High 8.5 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi 0.4%
  • CVE-2026-39885 High 7.5 FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications 0.4%
  • CVE-2026-39885 High 7.5 FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications 0.4%
  • CVE-2026-39885 High 7.5 FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications 0.4%