7 matches found
GO-2026-4569 vulnerabilities
Vulnerabilities for packages: github-mcp-server, jaeger, osv-scanner, datadog-agent, opencost, gptscript, ferretdb...
GO-2026-5779 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server...
CVE-2026-48529
GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...
CVE-2026-48529 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion
GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: karpenter, mariadb-operator, kubewatch, newrelic-infra-operator, gh, spire-server, secrets-store-csi-driver-provider-aws, dataplaneapi, dgraph, metacontroller, supercronic, volume-modifier-for-k8s, stakater-reloader, flux-image-reflector-controller, grafana-operator,...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: supercronic-fips, external-secrets-operator, local-path-provisioner-fips, sealed-secrets-fips, sftpgo-plugin-eventsearch, kubewatch, fluxcd-kustomize-mutating-webhook-fips, atlas, flux-notification-controller, flux-image-automation-controller, stakater-reloader,...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: supercronic-fips, external-secrets-operator, local-path-provisioner-fips, sealed-secrets-fips, sftpgo-plugin-eventsearch, kubewatch, fluxcd-kustomize-mutating-webhook-fips, atlas, flux-notification-controller, flux-image-automation-controller, stakater-reloader,...