HIGH7.5npm
GHSA-v6ph-xcq9-qxxj· CVE-2026-39885mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
Modified: 4/9/2026
package
npm/@frontmcp/sdk
pkg:npm/%40frontmcp/sdk
package
pkg:npm/%40frontmcp/sdk
mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
Modified: 4/9/2026