All vulnerabilities

CVE-2026-61559 · GHSA-2h44-8472-frjj

@zereight/mcp-gitlab vulnerable to server-side request forgery

criticalCVSS 9.6CWE-918

Vendor

zereight

Package

@zereight/mcp-gitlab npm

Affected

>= 0.0.1, < 2.1.27

Fixed in

2.1.27

Disclosed

2026-09-15

Credit

Avishai Gonen

ssrfmcp

Published advisory