GitLab MCP Server
GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more.
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.zereight/gitlab-mcp
· Source code · Website
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-cv3r-c5h8-f4g5@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeoverAlso filed as CVE-2026-61560 | critical | Not flagged | Sep 15, 2026 |
| GHSA-2h44-8472-frjj@zereight/mcp-gitlab Vulnerable to Server-Side Request ForgeryAlso filed as CVE-2026-61559 | critical | Not flagged | Sep 15, 2026 |
| GHSA-vmp7-252j-cwp7@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transportAlso filed as CVE-2026-61568 | critical | Not flagged | Sep 15, 2026 |
| GHSA-5648-rgj9-v224@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS | high | Not flagged | Sep 15, 2026 |
Versions in the registry
2.3.23 (listed), 2.3.22, 2.3.21, 2.3.20, 2.3.19, 2.3.18, 2.3.17, 2.3.16, 2.3.15, 2.3.14, 2.3.13, 2.3.12, 2.3.11, 2.3.10, 2.3.9, 2.3.8, 2.3.7, 2.3.6, 2.3.5, 2.3.4, 2.3.3, 2.3.2, 2.3.1, 2.3.0, 2.2.6, 2.2.5, 2.2.4, 2.2.3, 2.2.2, 2.2.1 and 61 older