mcp-gitlab vulnerabilities

CVEs whose affected-version data names the mcp-gitlab package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61462High· 8.6PoC

2mo ago

mcp-gitlab Path Traversal via job_id Parameter

mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to e…

▾ Midnightzereight · mcp-gitlabEPSS 0.51%via CVEORG