MEDIUM6.0Go
GHSA-pjp5-fpmr-3349· CVE-2026-48529, GO-2026-5779GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion
Modified: 7/7/2026
package
pkg:go/github.com/github/github-mcp-server
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion
Modified: 7/7/2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler
Modified: 8/18/2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server
Modified: 7/7/2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server
Modified: 8/18/2026