@yoda.digital/gitlab-mcp-server
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| @yoda.digital/gitlab-mcp-server's SSE transport has no authentication and wildcard CORS, exposing all 86 GitLab tools | @yoda.digital/gitlab-mcp-server | npm | High | Fix reported |