Path Traversal in GitLab Job Tools Enables Arbitrary API Requests via job_id

github.com 2026-07-14查看中文 →

Security AdvisoryHighzereight/gitlab-mcp

Affected:

gitlab-mcp 2.1.18

Referenced CVEs: CVE-2026-61462 · 8.6

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Prototype Pollution Vulnerability Fix and Test Cases in expandKey Function 2026-07-21 Trino OAuth2/OIDC redirect_uri validation bypass vulnerability 2026-07-21 Hospital Management System V1.0 SQL Injection in prescriptionorder.php with PoC 2026-07-21 Use-After-Free Vulnerability Fix in TeX Syntax Parser (syntax_parser.c) 2026-07-21 Netty Codecs SPDY Zlib Header Block Truncation Vulnerability (CVE-2020-56833) Advisory and POC 2026-07-21

Offline Archive

Offline screenshot & PDF are Pro-exclusive