GO-2026-5779 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server...

CVE-2026-48529

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

CVE-2026-48529 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, clickhouse-operator, hubble, flux-image-reflector-controller, flux, gh, sftpgo-plugin-eventsearch, secrets-store-csi-driver-provider-aws, flux-source-controller, supercronic, victoriametrics-cluster, envoy-ratelimit, dataplaneapi, tailscale,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: sealed-secrets-fips, flux-notification-controller, cilium-fips, mountpoint-s3-csi-driver, newrelic-k8s-metadata-injection, nova, dbmate, newrelic-infra-operator, eks-node-monitoring-agent, envoy-ratelimit-fips, karpenter, ingress-nginx-controller, dgraph, temporal,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: sealed-secrets-fips, flux-notification-controller, cilium-fips, mountpoint-s3-csi-driver, newrelic-k8s-metadata-injection, nova, dbmate, newrelic-infra-operator, eks-node-monitoring-agent, envoy-ratelimit-fips, karpenter, ingress-nginx-controller, dgraph, temporal,...