Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: zereight Clear all filters
TI-2026-44112 CVE-2026-61560 · GHSA-cv3r-c5h8-f4g5

Path traversal in zereight gitlab-mcp

Priority HIGH 82

`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02901 Published 2026-09-15 Fixed in 2.1.27 CWE-22
TI-2026-44067 CVE-2026-61462 · GHSA-5383-j2p9-qfg3

mcp-gitlab Path Traversal via job_id Parameter

Priority HIGH 79

mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00483 Published 2026-07-13 Fixed in 2.1.18 CWE-73