zereight/gitlab-mcp Security Advisories | GitStock

critical2026-09-16

@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

GHSA-cv3r-c5h8-f4g5 · CVE-2026-61560

critical2026-09-15

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

GHSA-2h44-8472-frjj · CVE-2026-61559

critical2026-09-15

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

GHSA-vmp7-252j-cwp7 · CVE-2026-61568

high2026-09-15

@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS

GHSA-5648-rgj9-v224