Log in Start free

zereight

Products

ProductCVEsExploitedLatest
gitlab-mcp3–Sep 15, 2026
mcp-gitlab1–Jul 13, 2026

Exploited and recent CVEs

  • CVE-2026-61560 Critical 9.8 @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover 2.9%
  • CVE-2026-61559 Critical 9.6 @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery 0.4%
  • CVE-2026-61568 Critical 9.6 @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport 0.5%
  • CVE-2026-61462 High 8.6 mcp-gitlab Path Traversal via job_id Parameter 0.5%