CVE-2025-11286: Server-Side Request Forgery (SSRF)

A vulnerability was determined in samanhappy MCPHub up to 0.9.10. This affects an unknown part of the file src/controllers/serverController.ts of the component MCPRouter Service. This manipulation of the argument baseUrl causes server-side request forgery. The attack may be initiated remotely. Th...

MCPHub 安全漏洞

MCPHub is an MCP server management tool by samanhappy individual developer. A security vulnerability exists in MCPHub version 0.9.10 and earlier, which stems from the incorrect manipulation of the parameter baseUrl in the file src/controllers/serverController.ts, which could lead to server-side...

CVE-2025-11287: Improper Authentication

A vulnerability was identified in samanhappy MCPHub up to 0.9.10. This vulnerability affects the function handleSseConnectionfunction of the file src/services/sseService.ts. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available...

PT-2025-40799

Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions up to 0.9.10 Description A server-side request forgery condition exists due to manipulation of the baseUrl argument within the file src/controllers/serverController.ts of the MCPRouter Service component. This issue c...

MCPHub 安全漏洞

MCPHub is an MCP server management tool by samanhappy individual developer. A security vulnerability exists in MCPHub version 0.9.10 and earlier, which stems from the incorrect manipulation of the parameter command/args in the file src/controllers/serverController.ts, which could lead to an os...