Skip to content
OpenAdvisories

Package · npm

hackmd-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-59155

    hackmd-mcp server-side request forgery in HTTP transport mode

    hackmd-mcp is a Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants. From 1.4.0 to before 1.5.0, hackmd-mcp contains a server-side request forgery (SSRF) vulnerability when the server is run in HTTP transport mode. A…

    yuna0x0 hackmd-mcp hackmd-mcp npm