zereight/gitlab-mcp v2.0.21

on GitHub

🔒 Security

• Default HOST binding changed from 0.0.0.0 to 127.0.0.1 (#289)
  • Fixes a security vulnerability where the MCP server was exposed to all network interfaces
  • In SSE or HTTP mode, anyone on the same network could previously access the server and use your GITLAB_TOKEN permissions
  • Migration: Docker users should add -e HOST=0.0.0.0 if external access is needed (examples updated in README)
  • Closes #288

Contributors

• @yamadashy