npm - OSV

GHSA-65h7-9wrw-629c

npm/@frontmcp/adapters
npm/frontmcp
npm/mcp-from-openapi

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix 11 Sep

Fix available
Severity - 8.5 (High)

GHSA-v6ph-xcq9-qxxj

npm/@frontmcp/adapters
npm/@frontmcp/sdk
npm/mcp-from-openapi

mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications 08 Apr

Fix available
Severity - 7.5 (High)