zereight gitlab-mcp vulnerabilities
3 published CVEs name zereight gitlab-mcp among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 3Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61560
@zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover
zereight · gitlab-mcp
Critical9.8 - CVE-2026-61559
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
zereight · gitlab-mcp
Critical9.6 - CVE-2026-61568
@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
zereight · gitlab-mcp
Critical9.6