fastmcp-3.2.0-py3-none-any.whl: 5 vulnerabilities (highest severity is: 8.1)

[mend-for-github-com]

Vulnerable Library - fastmcp-3.2.0-py3-none-any.whl

Path to dependency file: /pyproject.toml

Path to vulnerable library: /.venv/lib/python3.11/site-packages/click-8.3.0.dist-info

Vulnerabilities

Vulnerability	Severity	CVSS	Dependency	Type	Fixed in (fastmcp version)	Remediation Possible**
CVE-2026-59950	High	8.1	mcp-1.26.0-py3-none-any.whl	Transitive	3.3.0	✅
CVE-2026-52870	High	7.6	mcp-1.26.0-py3-none-any.whl	Transitive	3.3.0	✅
CVE-2026-7246	High	7.2	click-8.3.0-py3-none-any.whl	Transitive	3.3.0	✅
CVE-2026-52869	High	7.1	mcp-1.26.0-py3-none-any.whl	Transitive	3.3.0	✅
CVE-2026-28684	Medium	6.6	python_dotenv-1.2.1-py3-none-any.whl	Transitive	3.2.1	✅

**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

Details

CVE-2026-59950

Vulnerable Library - mcp-1.26.0-py3-none-any.whl

Model Context Protocol SDK

Library home page: https://files.pythonhosted.org/packages/fd/d9/eaa1f80170d2b7c5ba23f3b59f766f3a0bb41155fbc32a69adfa1adaaef9/mcp-1.26.0-py3-none-any.whl

Path to dependency file: /pyproject.toml

Path to vulnerable library: /.venv/lib/python3.11/site-packages/mcp-1.26.0.dist-info

Dependency Hierarchy:

• fastmcp-3.2.0-py3-none-any.whl (Root Library)
  • ❌ mcp-1.26.0-py3-none-any.whl (Vulnerable Library)

Found in base branch: main

Vulnerability Details

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.websocket.websocket_server transport accepted WebSocket handshakes without applying Host or Origin header validation, leaving no SDK-level way to restrict which origins could connect to applications that exposed that transport. This issue is fixed in version 1.28.1.

Publish Date: 2026-07-15

URL: CVE-2026-59950

CVSS 3 Score Details (8.1)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-vj7q-gjh5-988w

Release Date: 2026-07-15

Fix Resolution (mcp): 1.28.1

Direct dependency fix Resolution (fastmcp): 3.3.0

⛑️ Automatic Remediation will be attempted for this issue.

CVE-2026-52870

Vulnerable Library - mcp-1.26.0-py3-none-any.whl

Model Context Protocol SDK

Library home page: https://files.pythonhosted.org/packages/fd/d9/eaa1f80170d2b7c5ba23f3b59f766f3a0bb41155fbc32a69adfa1adaaef9/mcp-1.26.0-py3-none-any.whl

Path to dependency file: /pyproject.toml

Path to vulnerable library: /.venv/lib/python3.11/site-packages/mcp-1.26.0.dist-info

Dependency Hierarchy:

• fastmcp-3.2.0-py3-none-any.whl (Root Library)
  • ❌ mcp-1.26.0-py3-none-any.whl (Vulnerable Library)

Found in base branch: main

Vulnerability Details

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.23.0 until 1.27.2, default handlers installed by server.experimental.enable_tasks() for tasks/list, tasks/get, tasks/result, and tasks/cancel operate only on task identifiers without recording the session that created each task, allowing any connected client to enumerate, read results from, consume messages for, or cancel other clients' tasks. This issue is fixed in version 1.27.2.

Publish Date: 2026-07-15

URL: CVE-2026-52870

CVSS 3 Score Details (7.6)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: Low
  • Availability Impact: Low

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-hvrp-rf83-w775

Release Date: 2026-07-15

Fix Resolution (mcp): 1.27.2

Direct dependency fix Resolution (fastmcp): 3.3.0

⛑️ Automatic Remediation will be attempted for this issue.

CVE-2026-7246

Vulnerable Library - click-8.3.0-py3-none-any.whl

Composable command line interface toolkit

Library home page: https://files.pythonhosted.org/packages/db/d3/9dcc0f5797f070ec8edf30fbadfb200e71d9db6b84d211e3b2085a7589a0/click-8.3.0-py3-none-any.whl

Path to dependency file: /pyproject.toml

Path to vulnerable library: /.venv/lib/python3.11/site-packages/click-8.3.0.dist-info

Dependency Hierarchy:

• fastmcp-3.2.0-py3-none-any.whl (Root Library)
  • uvicorn-0.38.0-py3-none-any.whl
    • ❌ click-8.3.0-py3-none-any.whl (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
Mend Note: The description of this vulnerability differs from MITRE.

Publish Date: 2026-04-30

URL: CVE-2026-7246

CVSS 3 Score Details (7.2)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Local
  • Attack Complexity: High
  • Privileges Required: High
  • User Interaction: Required
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Release Date: 2026-04-30

Fix Resolution (click): 8.3.3

Direct dependency fix Resolution (fastmcp): 3.3.0

⛑️ Automatic Remediation will be attempted for this issue.

CVE-2026-52869

Vulnerable Library - mcp-1.26.0-py3-none-any.whl

Model Context Protocol SDK

Library home page: https://files.pythonhosted.org/packages/fd/d9/eaa1f80170d2b7c5ba23f3b59f766f3a0bb41155fbc32a69adfa1adaaef9/mcp-1.26.0-py3-none-any.whl

Path to dependency file: /pyproject.toml

Path to vulnerable library: /.venv/lib/python3.11/site-packages/mcp-1.26.0.dist-info

Dependency Hierarchy:

• fastmcp-3.2.0-py3-none-any.whl (Root Library)
  • ❌ mcp-1.26.0-py3-none-any.whl (Vulnerable Library)

Found in base branch: main

Vulnerability Details

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.27.2, the SSE and stateful Streamable HTTP transports mcp.server.sse.SseServerTransport and mcp.server.streamable_http_manager.StreamableHTTPSessionManager route requests to existing sessions using only the session_id query parameter or Mcp-Session-Id header without verifying the authenticated principal that created the session, allowing a different bearer-token-authenticated client with a known session ID to inject JSON-RPC messages into that session. This issue is fixed in version 1.27.2.

Publish Date: 2026-07-15

URL: CVE-2026-52869

CVSS 3 Score Details (7.1)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: Low

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-jpw9-pfvf-9f58

Release Date: 2026-07-15

Fix Resolution (mcp): 1.27.2

Direct dependency fix Resolution (fastmcp): 3.3.0

⛑️ Automatic Remediation will be attempted for this issue.

CVE-2026-28684

Vulnerable Library - python_dotenv-1.2.1-py3-none-any.whl

Read key-value pairs from a .env file and set them as environment variables

Library home page: https://files.pythonhosted.org/packages/14/1b/a298b06749107c305e1fe0f814c6c74aea7b2f1e10989cb30f544a1b3253/python_dotenv-1.2.1-py3-none-any.whl

Path to dependency file: /pyproject.toml

Path to vulnerable library: /.venv/lib/python3.11/site-packages/python_dotenv-1.2.1.dist-info

Dependency Hierarchy:

• fastmcp-3.2.0-py3-none-any.whl (Root Library)
  • ❌ python_dotenv-1.2.1-py3-none-any.whl (Vulnerable Library)

Found in base branch: main

Vulnerability Details

python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, "set_key()" and "unset_key()" in python-dotenv follow symbolic links when rewriting ".env" files, allowing a local attacker to overwrite arbitrary files via a crafted symlink when a cross-device rename fallback is triggered. Users should upgrade to v.1.2.2 or, as a workaround, apply the patch manually.

Publish Date: 2026-04-20

URL: CVE-2026-28684

CVSS 3 Score Details (6.6)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: Required
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: High
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-mf9w-mj56-hr94

Release Date: 2026-04-20

Fix Resolution (python-dotenv): 1.2.2

Direct dependency fix Resolution (fastmcp): 3.2.1

⛑️ Automatic Remediation will be attempted for this issue.

---

⛑️Automatic Remediation will be attempted for this issue.

[mend-for-github-com]

✔️ This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

[mend-for-github-com]

ℹ️ This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.