@jshookmcp/jshook vulnerabilities

CVEs whose affected-version data names the @jshookmcp/jshook package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49856Medium· 4.3

1mo ago

@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research

@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research. In version 0.3.1, he network domain has a central SSRF authorization policy that blocks private, loopback, link-local, and reser…

▾ Sunlitjshookmcp · @jshookmcp/jshookEPSS 0.28%via NVD