CVE-2026-49856
1 advisory.
npm/@jshookmcp/jshook CVE-2026-49856: medium 4.3, EPSS 0.28%
@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization
Action: Upgrade @jshookmcp/jshook to 0.3.2 or later.
npm i @jshookmcp/jshook@0.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.1 | 0.3.2 | - |
Fixed versions
| 0.3.2 |
Sources
- osv: GHSA-c5r6-m4mr-8q5j
- https://github.com/vmoranv/jshookmcp/security/advisories/GHSA-c5r6-m4mr-8q5j
- https://github.com/vmoranv/jshookmcp
CVE-2026-49856 · published · modified · JSON