@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport
CVE-2026-61568
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTT
今日共收录 2425 条安全情报,包含 1381 个 CVE,651 篇安全通告,以及 100 篇研究论文。
← 返回归档列表CVE-2026-61568
`@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTT
CVE-2026-54544
Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbou
CVE-2026-81927
Concrete CMS before 9.5.3 contained a stored cross-site scripting vulnerability in SVG file handling. When SVG processin
CVE-2026-81926
Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel's dupli
CVE-2026-61709
### Description In OpenFGA, the ListUsers API could incorrectly return a user who should have been excluded. ### Prec
CVE-2026-61597
### Impact Many djust built-in component template tags (`djust.components.templatetags.*`) render a developer/user-suppl
Firefox browsers
Sign in to Cloud
Sign Up for Free Cloud Tier
iOS 26.4.2 and iPadOS 26.4.2
iOS 18.7.8 and iPadOS 18.7.8
iOS 18.7.7 and iPadOS 18.7.7
iOS 26.4 and iPadOS 26.4
Background Security Improvements for iOS, iPadOS, and macOS
iOS 16.7.15 and iPadOS 16.7.15
iOS 15.8.7 and iPadOS 15.8.7
iOS 26.3 and iPadOS 26.3
iOS 18.7.5 and iPadOS 18.7.5
Android Code Search
Android Devices