GO-2026-4569 vulnerabilities

Vulnerabilities for packages: ferretdb, gptscript, datadog-agent, opencost, osv-scanner, jaeger, github-mcp-server...

GO-2026-5779 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server...

CVE-2026-48529

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

CVE-2026-48529 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: omnibump, dbmate, karpenter, smarter-device-manager, dgraph, metacontroller, apko, github-mcp-server, mariadb-operator, smokescreen, aws-load-balancer-controller, ingress-nginx-controller, actions-runner-controller, flux-notification-controller,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, metacontroller, goreleaser, commercial-expanso-edge, smokescreen, listmonk, aws-load-balancer-controller, pluto-fips, cilium-fips, grafana-rollout-operator, apko, supercronic-fips, flux-image-automation-controller-fips,...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: rabbitmq-messaging-topology-operator, metacontroller, goreleaser, commercial-expanso-edge, smokescreen, listmonk, aws-load-balancer-controller, pluto-fips, cilium-fips, grafana-rollout-operator, apko, supercronic-fips, flux-image-automation-controller-fips,...