fastmcp/docs
Jeremiah Lowin 5dd8cde2f9
Drop diskcache dependency (CVE-2025-69872) (#3185)
* Drop diskcache dependency (CVE-2025-69872)

Switch default OAuth proxy storage from DiskStore (backed by diskcache,
which uses pickle serialization) to FileTreeStore (file-per-key JSON).
This removes diskcache from the dependency tree entirely, resolving
CVE-2025-69872 for pip-audit and similar scanners.

* chore: Update SDK documentation

* Add comments explaining FileTreeStore warning suppression

* chore: Update SDK documentation

* Isolate storage by encryption key, gracefully handle decryption failures

* chore: Update SDK documentation

* Bump py-key-value-aio lower bound to 0.4.2 for FileTreeStore security hardening

* chore: Update SDK documentation

* Document storage backend change and update DiskStore references

* Bump py-key-value-aio lower bound to 0.4.3

* Bump py-key-value-aio to 0.4.4, remove warning suppression

* chore: Update SDK documentation

---------

Co-authored-by: marvin-context-protocol[bot] <225465937+marvin-context-protocol[bot]@users.noreply.github.com>
2026-02-16 16:43:15 -05:00
..
.cursor/rules Clean up parameter documentation 2025-06-22 20:59:53 -04:00
apps Reorganize docs navigation around Server/Client/Apps pillars (#3197) 2026-02-16 15:33:16 -05:00
assets Reorganize docs navigation around Server/Client/Apps pillars (#3197) 2026-02-16 15:33:16 -05:00
clients Reorganize docs navigation around Server/Client/Apps pillars (#3197) 2026-02-16 15:33:16 -05:00
community Update docs (#2094) 2025-10-14 16:38:21 -07:00
css Restructure documentation for FastMCP 3.0 (#2951) 2026-01-19 21:33:35 -05:00
deployment Pin httpx < 1.0 and simplify beta install docs (#2975) 2026-01-21 21:08:46 -05:00
development Drop diskcache dependency (CVE-2025-69872) (#3185) 2026-02-16 16:43:15 -05:00
getting-started Reorganize docs navigation around Server/Client/Apps pillars (#3197) 2026-02-16 15:33:16 -05:00
integrations Add Azure OBO dependencies, auth token injection, and documentation (#2918) 2026-02-09 20:06:57 -05:00
patterns Move fastmcp dev to fastmcp dev inspector 2026-02-13 22:42:38 -05:00
public/schemas/fastmcp.json chore: Update fastmcp.json schema (#1955) 2025-09-29 20:12:24 -04:00
python-sdk Drop diskcache dependency (CVE-2025-69872) (#3185) 2026-02-16 16:43:15 -05:00
servers Drop diskcache dependency (CVE-2025-69872) (#3185) 2026-02-16 16:43:15 -05:00
snippets Reorganize docs around provider architecture (#2723) 2025-12-25 09:00:20 -05:00
tutorials Remove trailing slashes from MCP endpoint URLs in docs (#2277) 2025-10-27 10:36:47 -04:00
v2 Add release notes for v2.14.4 and v2.14.5 (#3064) 2026-02-03 10:47:06 -05:00
.ccignore Add comprehensive OAuth 2.1 authentication system with WorkOS integration (#1327) 2025-08-01 17:06:55 -04:00
changelog.mdx Reorganize docs navigation around Server/Client/Apps pillars (#3197) 2026-02-16 15:33:16 -05:00
docs.json Reorganize docs navigation around Server/Client/Apps pillars (#3197) 2026-02-16 15:33:16 -05:00
updates.mdx docs: update all references from 3.0.0b2 to 3.0.0rc1 (#3173) 2026-02-12 16:39:16 -06:00
v2-banner.js Restructure documentation for FastMCP 3.0 (#2951) 2026-01-19 21:33:35 -05:00