Zereight

3 CVEs across 2 Zereight products. Browse Zereight vulnerabilities, severities, and proof-of-concept exploits.

Zereight products with known CVEs

ProductCVEs
Gitlab-Mcp2
Mcp-Gitlab1
Zereight CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61560Critical9.82026-09-15`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the SSE transport mode (`SSE=true`) exposes all MCP tools withou…
CVE-2026-61559Critical9.62026-09-15`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and prior to version 2.1.27, when the environment variable `ENA…
CVE-2026-61462High8.62026-07-13mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary…