{"action":"Upgrade fastmcp to 2.14.0 or later.","affected":[{"fixed":"2.14.0","introduced":"0"}],"component":"fastmcp","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["2.14.0"],"ghsa_id":"GHSA-rcfx-77hg-w2wv","id":"tcs_01M5KFXPW4DTCH3PR8VKN00985","modified_at":"2025-12-26T23:27:27.257304Z","published_at":"2025-12-26T23:20:50Z","references":["https://osv.dev/vulnerability/GHSA-rcfx-77hg-w2wv","https://github.com/jlowin/fastmcp/security/advisories/GHSA-rcfx-77hg-w2wv","https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-9h52-p55h-vw2f","https://nvd.nist.gov/vuln/detail/CVE-2025-66416","https://github.com/jlowin/fastmcp"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-rcfx-77hg-w2wv","url":"https://osv.dev/vulnerability/GHSA-rcfx-77hg-w2wv"}],"summary":"FastMCP updated to MCP 1.23+ due to CVE-2025-66416"}