Vulnerabilities

All ecosystems 2242770 AlmaLinux 5975 Alpaquita 16176 Alpine 4655 Android 3708 Azure Linux 17971 BellSoft Hardened Containers 770 Bitnami 9501 Chainguard 1048720 CleanStart 5432 CRAN 14 crates.io 2768 Debian 68992 Echo 7853 GHC 3 GIT 109121 GitHub Actions 55 Go 9332 Hackage 33 Hex 365 Julia 1713 Linux 29975 Mageia 6237 Maven 7055 MinimOS 148659 npm 229272 NuGet 1869 opam 29 openEuler 8900 openSUSE 14647 OSS-Fuzz 4019 Packagist 7103 Pub 11 PyPI 25495 Red Hat 23535 Rocky Linux 4344 Root 19650 RubyGems 5369 SUSE 23455 SwiftURL 61 TuxCare 9974 Ubuntu 66090 VSCode 21 Wolfi 293843

GHSA-8jr5-6gvj-rfpf

npm/@yoda.digital/gitlab-mcp-server

@yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools 09 May

Fix available
Severity - 8.8 (High)