GHSA-J6QF-3M9C-VWJ3 vulnerabilities

Vulnerabilities for packages: fleet-server-fips, kyverno-notation-aws, cg, chainloop-cli, redpanda-console, cortex-geomys-fips, rclone-fips, apply-cve-bump, zarf-fips, zot, redpanda-operator, gitea, neuvector-sigstore-interface-fips, mariadb-operator-fips, gotrue-fips, gitness, kubescape-server,...

CVE-2026-114437 vulnerabilities

Vulnerabilities for packages: fleet-server-fips, kyverno-notation-aws, cg, chainloop-cli, redpanda-console, cortex-geomys-fips, rclone-fips, apply-cve-bump, zarf-fips, zot, redpanda-operator, gitea, neuvector-sigstore-interface-fips, mariadb-operator-fips, gotrue-fips, gitness, kubescape-server,...

CVE-2026-114437 vulnerabilities

Vulnerabilities for packages: cortex, step-ca, kyverno-policy-reporter-ui, falcoctl, neuvector-sigstore-interface, zot, telegraf, gitea, github-mcp-server, gitsign, fluxcd-kustomize-mutating-webhook, crossplane, tkn, cosign, kyverno, gogatekeeper, kubescape, zarf, rclone, sftpgo, step-issuer, ste...

GHSA-J6QF-3M9C-VWJ3 vulnerabilities

Vulnerabilities for packages: cortex, step-ca, kyverno-policy-reporter-ui, falcoctl, neuvector-sigstore-interface, zot, telegraf, gitea, github-mcp-server, gitsign, fluxcd-kustomize-mutating-webhook, crossplane, tkn, cosign, kyverno, gogatekeeper, kubescape, zarf, rclone, sftpgo, step-issuer, ste...

CVE-2026-102906

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

EUVD-2026-89579

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

CVE-2026-102906

The 0xshariq github-mcp-server is vulnerable to an OS command injection in the Git Remove MCP Tool component. The flaw exists within the child_process.exec function of the src/github.ts file, where manipulation of the File argument allows for remote code execution. The exploit is publicly availab...

CVE-2026-102906 0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

CVE-2026-102906 0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

CVE-2026-102906 0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

CVE-2026-102906: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

PT-2026-103000

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function child process.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

SUSE CVE-2026-47427

GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...

GO-2026-6118 GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server

GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server...

PT-2026-80363

GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server...

GO-2026-4569 vulnerabilities

Vulnerabilities for packages: datadog-agent, github-mcp-server, opencost, jaeger, ferretdb, gptscript, osv-scanner...

CVE-2026-47427

GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...

CVE-2026-47427: NULL Pointer Dereference

GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go...

GO-2026-5779 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server...

CVE-2026-48529

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...