HIGHnpm
GHSA-8jr5-6gvj-rfpf· CVE-2026-44895@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools
Modified: 9/10/2026
package
pkg:npm/%40yoda.digital/gitlab-mcp-server
@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools
Modified: 9/10/2026