https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:28:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374843 EUVD-2026-374843 https://cve.radiocsirt.org/vuln/euvd-2026-374843 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61462 <p>mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator&#39;s personal access token.</p> <p>mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator&#39;s personal access token.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-61462 https://cve.radiocsirt.org/vuln/ghsa-5383-j2p9-qfg3 <p>mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator&#39;s personal access token.</p> <p>mcp-gitlab contains a path traversal vulnerability in the job_id parameter of build/index.js that allows attackers to redirect GitLab API requests to arbitrary endpoints. Attackers can supply crafted job_id values like ../../../user to escape the intended path prefix and access arbitrary GitLab API resources using the operator&#39;s personal access token.</p> https://cve.radiocsirt.org/vuln/ghsa-5383-j2p9-qfg3