agentfront mcp-from-openapi

• CVE-2026-115751 Low 3.7 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname 0.2%
• CVE-2026-115750 Low 3.7 mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects 0.2%
• CVE-2026-59973 High 8.5 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi 0.4%