PyPI/fastmcp: high

FastMCP updated to MCP 1.23+ due to CVE-2025-66416

Action: Upgrade fastmcp to 2.14.0 or later.

pip install fastmcp==2.14.0

Affected

Fixed versions

Sources

• osv: GHSA-rcfx-77hg-w2wv
• https://github.com/jlowin/fastmcp/security/advisories/GHSA-rcfx-77hg-w2wv
• https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-9h52-p55h-vw2f
• https://nvd.nist.gov/vuln/detail/CVE-2025-66416
• https://github.com/jlowin/fastmcp

published 2025-12-26T23:20:50Z · modified 2025-12-26T23:27:27.257304Z · JSON