Zereight Gitlab-mcp vulnerabilities
- zereight gitlab-mcp @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover 9.8 Critical
- zereight gitlab-mcp @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery 9.6 Critical
- zereight gitlab-mcp @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport 9.6 Critical