CVE-2026-19340
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Aug 09, 2026
Vendor
unknown
Description
A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/complete_backend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.