Bulletin No.294 · Oct 21, 2026Public data only · heuristic, not an audit
MCP/Watch Weekly digest
Latest advisories
2026-10-08HIGHGHSA-cv3g-hj65-pcfh — PraisonAI2026-10-08CRITICALGHSA-9mp3-24cc-77mg — PraisonAI2026-10-08HIGHGHSA-hc5v-gxvj-58wh — PraisonAI2026-10-08HIGHGHSA-5r6c-gj4g-r697 — PraisonAI2026-10-08HIGHGHSA-4w49-gwv8-fpjg — PraisonAI2026-10-08MODERATEGHSA-4r3p-w3mc-5v34 — PraisonAI2026-10-08HIGHGHSA-79fv-7hq9-w7xg — PraisonAI2026-10-08HIGHGHSA-2gpf-2492-q9jh — PraisonAI2026-10-08MODERATEGHSA-q7m5-3jmv-vm48 — PraisonAI2026-10-08MODERATEGHSA-xpx6-x8c2-mw5w — PraisonAI2026-10-08MODERATEGHSA-wf65-4jjx-q444 — PraisonAI2026-10-07HIGHGHSA-fj8f-m44g-c479 — PraisonAI
← Case index
Case file No.436 · npm · stdio

GitLab MCP Server

io.github.zereight/gitlab-mcp · v2.3.5

GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.

Package ↗GitHub ↗Website ↗
Security score
92/100
Strong

Normalized over 100 points of available evidence.

Score breakdown

Known advisories32/40

0 affecting current version, 4 historical

Maintenance20/20

last push 0 days ago

Source transparency15/15

public repo, license MIT

Metadata stability15/15

0 risky metadata change(s) without a version bump

Adoption10/10

103930 weekly downloads

Known advisories

source: OSV.dev
GHSA-cv3r-c5h8-f4g5CRITICALfixed / historical

@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

CVE-2026-61560 · published Sep 16, 2026
GHSA-2h44-8472-frjjCRITICALfixed / historical

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

CVE-2026-61559 · published Sep 15, 2026
GHSA-vmp7-252j-cwp7CRITICALfixed / historical

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

CVE-2026-61568 · published Sep 15, 2026
GHSA-5648-rgj9-v224HIGHfixed / historical

@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS

· published Sep 15, 2026

Metadata change timeline

rug-pull detection
  1. v2.3.2 → v2.3.5Oct 21, 2026
    • version changed version bump
      "2.3.2" → "2.3.5"
    • title changed title text edit
      "" → "GitLab MCP Server"
    • packages.0.version changed package version bump
      "2.3.2" → "2.3.5"
    • packages.1.identifier changed image tag 2.3.2 → 2.3.5 (version)
      "docker.io/zereight050/gitlab-mcp:2.3.2" → "docker.io/zereight050/gitlab-mcp:2.3.5"
  2. First snapshot (v2.3.2)Oct 17, 2026

Tool lists: not published by the registry — unknown.

FAQ

auto-generated from the data above
Is GitLab MCP Server safe?

MCPWatch gives GitLab MCP Server a heuristic security score of 92/100 (strong), based on 100 points of available evidence. This is an automated heuristic, not an audit.

Does GitLab MCP Server have known CVEs or vulnerabilities?

OSV.dev lists 4 unique advisories for @zereight/mcp-gitlab (CVE-2026-61560, CVE-2026-61559, CVE-2026-61568). 0 affect the current version 2.3.5.

When was GitLab MCP Server last updated?

The latest registry version is 2.3.5, published Oct 20, 2026. The last push to zereight/gitlab-mcp was on Oct 21, 2026. MCPWatch last checked it on Oct 21, 2026.

What license does GitLab MCP Server use?

GitHub reports the license of zereight/gitlab-mcp as MIT.

Related servers

same publisher / similar score