PyPI/fastmcp-slim: medium 6.8
FastMCP: Post-transform component authorization is skipped on direct calls
Action: Upgrade fastmcp-slim to 3.4.10 (3.x) or 4.1.2 (4.x) or later.
pip install fastmcp-slim==3.4.10pip install fastmcp-slim==4.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.4.10 | - |
| 4.0.0 | 4.1.2 | - |
Fixed versions
| 3.4.10 | 4.1.2 |
Sources
- osv: GHSA-7xgj-8392-5q4r#PyPI/fastmcp-slim
- https://github.com/PrefectHQ/fastmcp/security/advisories/GHSA-7xgj-8392-5q4r
- https://github.com/PrefectHQ/fastmcp/pull/5933
- https://github.com/PrefectHQ/fastmcp/pull/5934
- https://github.com/PrefectHQ/fastmcp/commit/85df42fbf2aa631cc81e0f986718b314128e91df
- https://github.com/PrefectHQ/fastmcp/commit/8649ba5fc91a68568a69729497edeb804a064332
- https://github.com/PrefectHQ/fastmcp
- https://github.com/PrefectHQ/fastmcp/releases/tag/v3.4.10
- https://github.com/PrefectHQ/fastmcp/releases/tag/v4.1.2
published · modified · JSON