GO-2026-4569 vulnerabilities

Vulnerabilities for packages: opencost, gptscript, ferretdb, github-mcp-server, jaeger, datadog-agent, osv-scanner...

GO-2026-5779 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server...

CVE-2026-48529

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

CVE-2026-48529 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: metacontroller, newrelic-infra-operator, nova, spire-server, dkron, stakater-reloader, kubewatch, malcontent, external-secrets-operator, karpenter, flux-image-automation-controller, local-path-provisioner, mariadb-operator, envoy-ratelimit, dataplaneapi,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, victorialogs-fips, atlas, flux-image-automation-controller-fips, nodetaint-fips, polaris, k8s-metacollector-fips, actions-runner-controller-fips, karpenter, pluto-fips, smarter-device-manager, local-path-provisioner-fips, omni-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-privateca-issuer, victorialogs-fips, atlas, flux-image-automation-controller-fips, nodetaint-fips, polaris, k8s-metacollector-fips, actions-runner-controller-fips, karpenter, pluto-fips, smarter-device-manager, local-path-provisioner-fips, omni-fips,...