@zereight/mcp-gitlab

GitLab MCP server for projects, merge requests, issues, pipelines, wiki, releases, and more

Latest 2.2.5

78%

Total Score

healthy

Active development and stable releases support adoption, but workflow permissions and many unpinned actions reduce supply-chain confidence.

Are you affected? Scan for Free

Health Score Breakdown

Lifecycle scripts

A prepare install-time script runs during installation, adding execution during dependency setup; this is a supply-chain hygiene concern despite the package's otherwise strong provenance.

Repo bus factor

The leading contributor accounts for about 68% of recent commits, which creates concentration risk, although 20 other contributors were active during the same period.

Workflow audit

All 11 workflows were analyzed, but 32 of 40 action references are unpinned, four workflows grant top-level write access, and high-confidence bot-condition and template-injection findings remain. The low-confidence cache findings are hygiene concerns only, with no untrusted checkout or script-injection path observed.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-344116 @zereight/mcp-gitlab is vulnerable to DNS Rebinding in versions 0.0.1 - 2.1.29.	0.0.1 - 2.1.29	Critical
AIKIDO-2026-523251 @zereight/mcp-gitlab is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.1 - 2.1.26.	0.0.1 - 2.1.26	Critical
AIKIDO-2026-936407 @zereight/mcp-gitlab is vulnerable to Path Traversal in versions 0.0.1 - 2.1.26.	0.0.1 - 2.1.26	Critical
AIKIDO-2026-665195 @zereight/mcp-gitlab is vulnerable to Path Traversal in versions 0.0.1 - 2.1.30.	0.0.1 - 2.1.30	High
AIKIDO-2026-351126 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @zereight/mcp-gitlab is vulnerable to Exposure of Sensitive Information in versions 2.0.18 - 2.1.28.	2.0.18 - 2.1.28	Medium