{"items":[{"id":"CVE-2026-39885","published":"2026-04-08T20:34:20.538Z","updated":"2026-04-09T16:16:59.067Z","title":"FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications","severity":"HIGH","score":7.5,"vendor":"agentfront","product":"frontmcp","kev":false,"epss":0.00403,"kevAdded":null,"exploit":true}]}