Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

samanhappy — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting samanhappy. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security vulnerabilities associated with the vendor samanhappy. It collects reported flaws across various product lines, covering a broad time range from initial disclosure to recent patches. Readers can use this resource to track the vendor's security advisories, understand specific weakness classes affecting their software, or look up the historical vulnerability profile of individual products. The data is organized to facilitate analysis of remediation trends and risk exposure over time, providing a consolidated view for security professionals and developers. By examining the entries here, users can identify patterns in how samanhappy addresses security issues and assess the overall stability of their offerings. This aggregation serves as a reference point for evaluating vendor responsiveness and the prevalence of certain vulnerability types within their ecosystem.

Found 13 results / 13 Clear Filters
Top products by samanhappy: MCPHub
CVE ID Title CVSS Severity Published
CVE-2026-94047 samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management — MCPHub CWE-269 6.3 Medium 2026-09-20
CVE-2026-90474 MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass — mcphub CWE-287 6.8 Medium 2026-09-12
CVE-2026-79743 MCPHub: Path Traversal via Malicious MCPB Manifest Name — mcphub CWE-22 6.9 Medium 2026-08-31
CVE-2026-79744 MCPHub: Missing Authorization on `PUT /api/system-config` Lets Any Non-Admin Rewrite Global Security Configuration — mcphub CWE-269 8.8 High 2026-08-31
CVE-2026-79745 MCPHub: Missing Authorization on Built-in Prompt & Resource CRUD (Unauthorized Tampering of Globally-Served Templates/Resources) — mcphub CWE-862 7.1 High 2026-08-31
CVE-2026-79746 MCPHub: Server-scoped bearer key gains access to an entire group via partial (any-overlap) server matching — mcphub CWE-863 8.1 High 2026-08-31
CVE-2026-79747 MCPHub vulnerable to SSRF: a non-admin user can make mcphub request arbitrary URLs and read the response (OpenAPI proxy + transport dial) — mcphub CWE-918 7.1 High 2026-08-31
CVE-2026-79748 MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args) — mcphub CWE-862 9.9 Critical 2026-08-31
CVE-2026-79749 MCPHub: SSRF Guard Bypass via IPv6 Transition Addresses in URL Validation — mcphub CWE-918 7.6 High 2026-08-31
CVE-2026-79750 MCPHub authenticated horizontal IDOR: any non-admin user executes tools on other users' MCP servers (cross-tenant file read + SSRF) — mcphub CWE-639 7.7 High 2026-08-31
CVE-2025-11287 samanhappy MCPHub sseService.ts handleSseConnectionfunction improper authentication — MCPHub CWE-287 7.3 High 2025-10-05
CVE-2025-11286 samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery — MCPHub CWE-918 4.7 Medium 2025-10-05
CVE-2025-11285 samanhappy MCPHub serverController.ts os command injection — MCPHub CWE-78 6.3 Medium 2025-10-05

This page lists every published CVE security advisory associated with samanhappy. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.