npm/@frontmcp/adapters: medium 5.9
FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller
Action: Upgrade @frontmcp/adapters to 1.5.6 or later.
npm i @frontmcp/adapters@1.5.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.6 | - |
Fixed versions
| 1.5.6 |
Sources
- osv: GHSA-8q49-2h5h-434x
- https://github.com/agentfront/frontmcp/security/advisories/GHSA-8q49-2h5h-434x
- https://github.com/agentfront/frontmcp/pull/510
- https://github.com/agentfront/frontmcp/commit/077201e109bf6f45dbc85c36d6bd77ded18ab13e
- https://github.com/agentfront/frontmcp
- https://github.com/agentfront/frontmcp/releases/tag/v1.5.6
published · modified · JSON