zereight

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

zereight records in CISA KEV

No zereight vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-44112 CVE-2026-61560 · GHSA-cv3r-c5h8-f4g5

Path traversal in zereight gitlab-mcp

HIGH 82

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02901 Published 2026-09-15 Fixed in 2.1.27 CWE-22

TI-2026-44067 CVE-2026-61462 · GHSA-5383-j2p9-qfg3

mcp-gitlab Path Traversal via job_id Parameter

HIGH 79

mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00483 Published 2026-07-13 Fixed in 2.1.18 CWE-73

TI-2026-44111 CVE-2026-61559 · GHSA-2h44-8472-frjj

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

HIGH 76

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00426 Published 2026-09-15 Fixed in 2.1.27 CWE-918

TI-2026-44113 CVE-2026-61568 · GHSA-vmp7-252j-cwp7

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

MEDIUM 44

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00532 Published 2026-09-15 Fixed in 2.1.30 CWE-350

Open these records in search →

Critical	4
High	0
Medium	0
Low	0
No CVSS	0