Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

zereight vulnerabilities

4 published CVEs name zereight among the affected products.

Published CVEs
4
Last 12 months
4
Critical
4
Known exploited
0

Critical 4High 0Medium 0Low 0Not scored 0

Newest CVEs

  • CVE-2026-61560

    @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

    zereight · gitlab-mcp

    Critical9.8
  • CVE-2026-61559

    @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

    zereight · gitlab-mcp

    Critical9.6
  • CVE-2026-61568

    @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

    zereight · gitlab-mcp

    Critical9.6
  • CVE-2026-61462

    mcp-gitlab Path Traversal via job_id Parameter

    zereight · mcp-gitlab

    Critical9.2