zereight gitlab-mcp vulnerabilities

3 published CVEs name zereight gitlab-mcp among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 3
Known exploited: 0

Critical 3High 0Medium 0Low 0Not scored 0

Newest CVEs

CVE-2026-61560
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
zereight · gitlab-mcp
Critical9.8
CVE-2026-61559
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
zereight · gitlab-mcp
Critical9.6
CVE-2026-61568
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
zereight · gitlab-mcp
Critical9.6

Most common weaknesses