提交 #661170: samanhappy mcphub v0.9.10 Unauthorized access

In the handleSseConnectionfunction within src/services/sseService.ts,users can directly forge any user's identity without logging in to access and operate the MCP.

• 来源: ⚠️ https://github.com/August829/YU1/issues/8
• 用户: Yu Bao (UID 88956)
• 提交: 2025-09-23 11時07分 (1 年前)
• 管理: 2025-10-04 13時27分 (11 days later)
• 状态: 已接受
• VulDB条目: 327045 [samanhappy MCPHub 直到 0.9.10 sseService.ts handleSseConnectionfunction 弱身份验证]
• 积分: 16