—
GO-2026-6118
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server
Quick fix
GO-2026-6118 — github.com/github/github-mcp-server: upgrade to the fixed version with the command below.
go get github.com/github/github-mcp-server@v1.1.0Details
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/github/github-mcp-server
Introduced in:
0Fixed in: 1.1.0Fix
go get github.com/github/github-mcp-server@v1.1.0References
- https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7[ADVISORY]
- https://github.com/github/github-mcp-server/commit/c88d2ecdd3bb07f7bdd75296e3ee676febf14f58[FIX]
- https://github.com/github/github-mcp-server/pull/2502[FIX]
- https://github.com/github/github-mcp-server/releases/tag/v1.1.0[WEB]