Nhost
Let your users work with their own data through an AI assistant, limited to what they can see.
0.4.0-beta2version the registry lists (3 published)
1reported issue
Nolisted version affected
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.nhost/mcp
· Source code · Website
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| CVE-2026-34200Nhost is an open source Firebase alternative with GraphQL. Prior to version 1.41.0, The Nhost CLI MCP server, when explicitly configured to listen on a network port, applies no inbound authentication and does not enforce strict CORS. This allows a m… | high | Not checked | Mar 31, 2026 |
Versions in the registry
0.4.0-beta2 (listed), 0.4.0-beta1, 0.3.0