Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

samanhappy/mcphub

              main @ c182265
            

Fixes

CVEs

CRITICAL

Peak severity

26.1%

Coverage

Highlights

Auth Bypass: 18 prior fixes. Scrutinize any change in this area.

src/middlewares/auth.ts: most-fixed (7 issues). Treat as high-risk during review.

21 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The application historically suffered from frequent path-matching bypasses, missing JWT signature verification, and unauthenticated exemptions on administrative routes, documented under CVE-2025-13822. Developers must ensure all API endpoints default to requiring strict validation without exception leaks.

Auth Bypass: As tracked in CVE-2025-11287, the SSE transport implementation bypassed standard middleware-level JWT/Bearer checks, allowing remote attackers to establish unauthorized channels. Direct validation against persistent database records must be explicitly integrated into the SSE connection handshakes.

SSRF: Outbound requests issued by internal clients and controllers were vulnerable to server-side request forgery (CVE-2025-11286), enabling malicious actors to trigger requests targeting local networks, loopback addresses, or private system services.