Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Yoda-digital
Yoda-digital vulnerabilities
Newest
yoda-digital
mcp-gitlab-server
GitLab MCP Server: SSE transport has no authentication and wildcard CORS, exposing all GitLab tools
CVE-2026-44895
Fix available
9.2
Critical
May 9, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open