CVE-2026-19340

Name of the Vulnerable Software and Affected Versions anubissbe ProjectHub-Mcp versions prior to 5.0.1

Description A weakness in the Webhooks API component, specifically within the file backend-fix/complete backend.js, allows for server-side request forgery (SSRF). This occurs when the url argument is manipulated, enabling remote exploitation to make unauthorized requests from the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the Webhooks API component to minimize the risk of exploitation.