Search

about.gitlab.com › blog › critical-rce-in-serena

Critical remote code execution in Serena, a popular MCP coding agent

… At scale, this may call for tooling and policy. From there, apply the same scrutiny to MCP server updates that you apply elsewhere: a vulnerability in an MCP server is a vulnerability on every machine that runs it. …

Aug 17, 2026 · Daniel Abeles

about.gitlab.com › blog

FinServ: How to implement GitLab's separation of duties features

… To implement further restrictions, please consider these key policy features: Prevent approval by author: This policy puts a guardrail in place so that a merge request author cannot approve their own changes. …

Aug 13, 2024 · Cherry Han