zereight gitlab-mcp

• CVE-2026-61560 Critical 9.8 @zereight/mcp-gitlab's unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover 2.9%
• CVE-2026-61559 Critical 9.6 @zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery 0.4%
• CVE-2026-61568 Critical 9.6 @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport 0.5%