GHSA-WCRF-9VRR-854F vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent, datadog-agent-fips, tigera-operator-fips, gitlab-operator-fips, tigera-operator...

CVE-2026-53719 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent, datadog-agent-fips, tigera-operator-fips, gitlab-operator-fips, tigera-operator...

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent, datadog-agent-fips, tigera-operator-fips, gitlab-operator-fips, tigera-operator...

CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: gitlab-operator, datadog-agent, datadog-agent-fips, tigera-operator-fips, gitlab-operator-fips, tigera-operator...

The vulnerability of the mirroring mechanism of the Git-based software platform for collaborative code development, GitLab EE, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the repository mirroring mechanism of the Git-based software platform for collaborative code development in GitLab CE/EE is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the...

The vulnerability of the mechanism for displaying discussions about commit messages and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the mechanism for displaying commit discussions and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab EE allows a violator to compromise the confidentiality of the protected information.

The vulnerability of the mechanism for checking access rights to metadata of working elements in private projects of a Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authorization process. Exploiting this vulnerability could allow ...

CVE-2025-12506 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...

CVE-2026-13320 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...

GHSA-M49F-RVV4-R4RV vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...

GHSA-H5PW-H3J7-CJ7F vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...

GHSA-PGGX-2V9R-J6GM vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...

CVE-2026-7492 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...

Path Traversal

Overview @zereight/mcp-gitlab is a GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more Affected versions of this package are vulnerable to Path Traversal in the job URL construction in build/index.js, which interpolates the jobid parameter into GitLab API...

CVE-2026-61462

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...

CVE-2026-61462 mcp-gitlab Path Traversal via job_id Parameter

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...

CVE-2026-61462 mcp-gitlab Path Traversal via job_id Parameter

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...

CVE-2026-61462

CVE-2026-61462 affects mcp-gitlab. A path traversal weakness exists in the build/index.js job_id parameter, allowing an attacker to escape the intended path prefix (e.g., using ../../../user) and redirect GitLab API requests to arbitrary endpoints. This can enable access to arbitrary GitLab API r...

CVE-2026-61462 mcp-gitlab Path Traversal via job_id Parameter

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...

EUVD-2026-43504

mcp-gitlab contains a path traversal vulnerability in the jobid parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted jobid values like ../../../user to escape the intended path prefix and access arbitrary GitLab API...