gitlab

• CVE-2026-0723 - GitLab 2FA device response bypass 2026-06-11
• CVE-2026-44895 - GitLab MCP Server SSE auth bypass 2026-06-09