GHSA lookup
GHSA-VV7Q-7JX5-F767
Pruva has a verified reproduction for GHSA-VV7Q-7JX5-F767: FastMCP: path traversal to authenticated SSRF in OpenAPIProvider _build_url(). The canonical evidence record is REPRO-2026-00138.
REPRO
REPRO-2026-00138
Package
fastmcp · pip
Severity
HIGH
Status
published