https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:18:28.652015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374843 EUVD-2026-374843 2026-10-06T15:18:28.705305+00:00 EUVD-2026-374843 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61462 fkie_cve-2026-61462 2026-10-06T15:18:28.705346+00:00

mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator's personal access token.

 https://cve.radiocsirt.org/vuln/ghsa-5383-j2p9-qfg3 GHSA-5383-j2p9-qfg3 2026-10-06T15:18:28.705382+00:00

mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator's personal access token.