Skip to content
OpenAdvisories

Vendor

vmoranv

1 known vulnerabilities.

Products

jshookmcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-49856

    @jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization

    @jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he network domain has a central SSRF authorization policy that blocks private, loopback, link-local, and reserved targets unless an …

    vmoranv jshookmcp @jshookmcp/jshook npm