@yoda.digital/gitlab-mcp-server vulnerabilities (npm)

1 vulnerability.

• @yoda.digital/gitlab-mcp-server npm GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab tools CVE-2026-44895 Fix available 9.2 CriticalMay 9, 2026