SSRF/token exfiltration in @zereight/mcp-gitlab when ENABLE_DYNAMIC_API_URL=true: attacker sets X-GitLab-API-URL to an arbitrary host, and the server uses it as the base for outbound GitLab API calls, attaching the victim Private-Token to each fetch. Affected `>=0.0.1,