@samanhappy/mcphub vulnerabilities (npm)
5 vulnerabilities.
-
@samanhappy/mcphubnpm @samanhappy/mcphub: SSE Endpoint Accepts Arbitrary Username from URL Path Without Authentication, Enabling User Impersonation 9.1 Critical -
@samanhappy/mcphubnpm MCPHub: Path Traversal via Malicious MCPB Manifest Name 6.9 Medium -
@samanhappy/mcphubnpm Authentication bypass in MCPHub 5.3 Medium -
@samanhappy/mcphubnpm samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authentication 6.9 Medium -
@samanhappy/mcphubnpm samanhappy MCPHub serverController.ts os command injection 5.3 Medium