package

npm/@frontmcp/adapters

pkg:npm/%40frontmcp/adapters

HIGH8.5npm

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

Modified: 9/11/2026

MEDIUM5.9npm

FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller

Modified: 7/24/2026

HIGH7.5npm

mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications

Modified: 4/9/2026