MCP server that opens a native desktop window to display rich content (Markdown, HTML, Mermaid diagrams, images) with real-time updates via SSE.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware
hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard
Hono vulnerable to arbitrary file access via serveStatic vulnerability
Hono: Path traversal in toSSG() allows writing files outside the output directory
Mermaid: Improper sanitization of configuration leads to CSS injection
[](https://m8ven.ai/mcp/him0-showcase-mcp-1hdpuz)