medium6.3
CVE-2026-19340
A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0.
Impact
A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Product | Affected versions |
|---|---|
| Anubissbe ProjectHub-Mcp | before 5.0.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.