{"api_version":"v1","generated_at":"2026-10-07T23:55:00+00:00","product":{"cve_count":3,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-zereight-gitlab-mcp-1512e4233fe4","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/gitlab-mcp","name":"gitlab-mcp","next_cursor":null,"observations":[{"affected":"gitlab-mcp: < 2.1.27","affected_versions_present":true,"cve_id":"CVE-2026-61560","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61560","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-16T13:59:32.899Z","patch_url":"","primary_source":"","published":"2026-09-15T21:09:00.405Z"},{"affected":"gitlab-mcp: >= 0.0.1, < 2.1.27","affected_versions_present":true,"cve_id":"CVE-2026-61559","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61559","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-17T16:50:15.672Z","patch_url":"","primary_source":"","published":"2026-09-15T20:58:41.639Z"},{"affected":"gitlab-mcp: < 2.1.30","affected_versions_present":true,"cve_id":"CVE-2026-61568","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-61568","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-16T18:36:39.016Z","patch_url":"","primary_source":"","published":"2026-09-15T20:56:11.723Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"zereight"}}