CVE-2026-61559
1 advisory.
npm/@zereight/mcp-gitlab CVE-2026-61559: critical 9.6
@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery
Action: Upgrade @zereight/mcp-gitlab to 2.1.27 or later.
npm i @zereight/mcp-gitlab@2.1.27Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | 2.1.27 | - |
Fixed versions
| 2.1.27 |
Sources
- osv: GHSA-2h44-8472-frjj
- https://github.com/zereight/gitlab-mcp/security/advisories/GHSA-2h44-8472-frjj
- https://github.com/zereight/gitlab-mcp/pull/625
- https://github.com/zereight/gitlab-mcp/commit/6ffb4cc70706fd05b1ab80901676bc2998b6db6d
- https://github.com/zereight/gitlab-mcp
- https://github.com/zereight/gitlab-mcp/releases/tag/v2.1.27
CVE-2026-61559 · published · modified · JSON