github.com/github/github-mcp-server vulnerabilities (Go)

2 vulnerabilities.

• github.com/github/github-mcp-server Go GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler CVE-2026-47427 Fix available 7.5 HighJuly 28, 2026
• github.com/github/github-mcp-server Go GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion CVE-2026-48529 Fix available 6.0 MediumJune 25, 2026