zereight vulnerabilities
4 published CVEs name zereight among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 4Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61560
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
zereight · gitlab-mcp
Critical9.8 - CVE-2026-61559
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
zereight · gitlab-mcp
Critical9.6 - CVE-2026-61568
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
zereight · gitlab-mcp
Critical9.6 - CVE-2026-61462
mcp-gitlab Path Traversal via job_id Parameter
zereight · mcp-gitlab
Critical9.2