CVE Intelligence

Anubissbe ProjectHub-Mcp vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Anubissbe ProjectHub-Mcp: 1 record(s), with affected versions and fixes.

CVE-2026-19340 Medium · 6.3 CWE-918 Aug 9, 2026
anubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgery
A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.