@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

CVE-2026-61560

### Summary The SSE transport mode (`SSE=true`) exposes all MCP tools without any authentication. The `upload_markdown`

历史摘要 · 未重新核验 · GitHub Advisory

@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery

CVE-2026-61559

# Server-Side Request Forgery via X-GitLab-API-URL Header Allows Credential Theft ## Affected - **Repository:** `zerei

历史摘要 · 未重新核验 · GitHub Advisory

@zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

CVE-2026-61568

`@zereight/mcp-gitlab` exposes its Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicio

历史摘要 · 未重新核验 · GitHub Advisory

@zereight/mcp-gitlab has multiple safety-control bypasses: execute_graphql read-only + allow-list bypass, unauthenticated transports, session-exhaustion DoS

### Summary @zereight/mcp-gitlab exposes GitLab to an LLM agent while relying on read-only mode, a project allow-list, a

历史摘要 · 未重新核验 · GitHub Advisory

yayson: Prototype pollution in Store/LegacyStore deserialization

CVE-2026-61534

# Summary `Store`/`LegacyStore` key internal lookup tables by the `type`, `id`, and relationship names from a JSON:API d

历史摘要 · 未重新核验 · GitHub Advisory

@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft

CVE-2026-59148

## Summary Mockoon's admin API ([`commons-server/src/libs/server/admin-api.ts`](https://github.com/mockoon/mockoon/blob

历史摘要 · 未重新核验 · GitHub Advisory

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

CVE-2026-59149

## Summary A `FILE` response whose `filePath` embeds request data (e.g. `"/srv/public/{{queryParam 'name'}}"`, the docu

历史摘要 · 未重新核验 · GitHub Advisory

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

CVE-2026-59973

## Summary The published fix for GHSA-v6ph-xcq9-qxxj / CVE-2026-39885 added a direct hostname denylist for OpenAPI exte

历史摘要 · 未重新核验 · GitHub Advisory

@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission

CVE-2026-59965

## Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission ### Summary `@jhb.software/p

历史摘要 · 未重新核验 · GitHub Advisory

@argos-ci/core: CI Branch Name OS Command Injection

CVE-2026-59960

## CI Branch Name OS Command Injection in @argos-ci/core ### Summary `@argos-ci/core@6.2.0` passes attacker-controlled

历史摘要 · 未重新核验 · GitHub Advisory

OmniRoute ACP Custom-Agent Remote Code Execution (RCE)

CVE-2026-88062

## 2. Summary `POST /api/acp/agents` registers a custom ACP agent. The endpoint accepts user-controlled `binary` and `v

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

CVE-2026-86073

## Impact The OAuth token endpoint bound an authorization code's first access token to the consented resource, but not

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content

CVE-2026-86074

## Impact Instance AI credential setup accepted a credential test/verification URL without checking it matched the work

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read

CVE-2026-86995

## Impact The Git node validated the repository that a fetch or pull targeted, but `setUpstream` wrote a `branch..remot

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints

CVE-2026-86085

## Impact The endpoints `/rest/roles/:slug/assignments` and `/rest/roles/:slug/assignments/:projectId/members` checked

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

CVE-2026-86993

## Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and d

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy

CVE-2026-86996

## Impact A workflow's "_This workflow can be called by_" setting was enforced by the Execute Workflow node but was not

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: IDN/Punycode domain allow-list bypass leads to email delivery to an attacker-controlled domain

### Summary Nodemailer resolves an international (IDN / non-ASCII) recipient **domain** to a different Punycode `xn--`

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: Quadratic (O(n²)) time complexity in addressparser allows remote denial of service via a crafted address list

### Summary Nodemailer's address parser (`lib/addressparser/index.js`) parses a list of comma‑separated addresses in **

历史摘要 · 未重新核验 · GitHub Advisory

Nodemailer: Recipient-domain validation bypass via RFC 5322 comment mis-parsing leads to email delivery to an attacker-controlled domain

### Summary Nodemailer's email-address parser treats an **RFC 5322 comment** `( ... )` inside the domain as a point to

历史摘要 · 未重新核验 · GitHub Advisory