@samanhappy/mcphub
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| MCPHub has Path Traversal via Malicious MCPB Manifest Name | @samanhappy/mcphub | npm | High | Fix reported | |
| @samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation | @samanhappy/mcphub | npm | Critical | Fix reported | |
| MCPHub has an authentication bypass | @samanhappy/mcphub | npm | Medium | Fix reported | |
| MCPHub has an Improper Authorization vulnerability via its handleSseConnection function | @samanhappy/mcphub | npm | Medium | No fix reported | |
| MCPHub's ServerController is vulnerable to Command Injection | @samanhappy/mcphub | npm | Low | No fix reported |