Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@samanhappy/mcphub

npm

A hub server for mcp servers

View on npmjs.org

Security Advisories for @samanhappy/mcphub in npm

Critical
3 months ago

@samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation GSA_kwCzR0hTQS13ZjhxLXd2djgtcDhqZs4ABW5Y

npm @samanhappy/mcphub
High
4 months ago

MCPHub has Path Traversal via Malicious MCPB Manifest Name GSA_kwCzR0hTQS1wM2gyLTJqNHAtcDgzZ84ABVp6

npm @samanhappy/mcphub
Moderate
4 months ago

MCPHub has an authentication bypass GSA_kwCzR0hTQS05dnE3LTloNDItajg4aM4ABVN_

npm @samanhappy/mcphub
Moderate
10 months ago

MCPHub has an Improper Authorization vulnerability via its handleSseConnection function GSA_kwCzR0hTQS12N2M0LTMzdmYtY3Fxcc4ABM-c

npm @samanhappy/mcphub
Low
10 months ago

MCPHub's ServerController is vulnerable to Command Injection GSA_kwCzR0hTQS01cTJwLTNqZzgtMm05OM4ABM-Y

npm @samanhappy/mcphub

Filter by Severity

Moderate 2 Low 1 High 1 Critical 1