agentfront frontmcp

• CVE-2026-59973 High 8.5 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi 0.4%
• CVE-2026-67531 Critical 9.3 FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool 0.7%
• CVE-2026-39885 High 7.5 FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications 0.4%