Github-mcp-server (Github) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-28. Vendor: Github.

CVEs of Github-mcp-server

• CVE-2026-47427 - CVSS 7.5 (high), 2026-07-28: GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first…
• CVE-2026-48529 - CVSS 6 (medium), 2026-06-26: GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is…