Zereight vulnerabilities

Products

• Gitlab-mcp 3

Newest

• zereight gitlab-mcp @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover CVE-2026-61560 Fix available 9.8 CriticalSeptember 15, 2026
• zereight gitlab-mcp @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery CVE-2026-61559 Fix available 9.6 CriticalSeptember 15, 2026
• zereight gitlab-mcp @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport CVE-2026-61568 Fix available 9.6 CriticalSeptember 15, 2026
• zereight mcp-gitlab mcp-gitlab Path Traversal via job_id Parameter CVE-2026-61462 9.2 CriticalJuly 13, 2026