jlowin fastmcp

• CVE-2026-27124 High 8.2 FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities 0.2%
• CVE-2025-64340 Medium 6.7 FastMCP has a Command Injection vulnerability - Gemini CLI 0.7%
• CVE-2025-69196 High 7.4 FastMCP OAuth Proxy token reuse across MCP servers 0.4%
• CVE-2025-62801 Medium 5.4 FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name 0.2%
• CVE-2025-62800 Medium 5.3 FastMCP vulnerable to reflected XSS in client's callback page 0.3%