What’s Vulnerable › Products

zereight gitlab-mcp vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your zereight gitlab-mcp version is affected

Latest zereight gitlab-mcp vulnerabilities

• CVE-2026-61560 — @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover (CVSS 9.8)
• CVE-2026-61568 — @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport (CVSS 9.6)
• CVE-2026-61559 — @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery (CVSS 9.6)