GO-2026-4569 vulnerabilities

Vulnerabilities for packages: datadog-agent, github-mcp-server, osv-scanner, opencost, gptscript, ferretdb, jaeger...

GO-2026-5779 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server...

CVE-2026-48529

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

CVE-2026-48529 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: volume-modifier-for-k8s, spire-server, envoy-ratelimit, dgraph, go, grafana-operator, ingress-nginx-controller, victoriametrics-cluster, nodetaint, sftpgo-plugin-eventsearch, karpenter, temporal, oras, aws-network-policy-agent, mountpoint-s3-csi-driver, apko,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, nodetaint, k8s-metacollector, victoriametrics-fips, commercial-expanso-edge, cilium-fips, nginx-kubernetes-ingress-fips, sftpgo-plugin-eventsearch, nova-fips, go, pluto-fips, hubble, flux-image-reflector-controller-fips,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, nodetaint, k8s-metacollector, victoriametrics-fips, commercial-expanso-edge, cilium-fips, nginx-kubernetes-ingress-fips, sftpgo-plugin-eventsearch, nova-fips, go, pluto-fips, hubble, flux-image-reflector-controller-fips,...