GO-2026-4569 vulnerabilities

Vulnerabilities for packages: osv-scanner, github-mcp-server, gptscript, ferretdb, jaeger, opencost, datadog-agent...

GO-2026-5779 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server...

CVE-2026-48529

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

CVE-2026-48529 GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion

GitHub MCP Server is GitHub's official MCP Server. From 0.22.0 until 1.1.2, when running in HTTP mode with --lockdown-mode enabled, the RepoAccessCache is implemented as a process-global singleton initialized with the first authenticated user's GraphQL client. All subsequent requests from differe...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: flux, grafana-operator, envoy-ratelimit, nfs-subdir-external-provisioner, osv-scanner, smarter-device-manager, spire-server, polaris, ingress-nginx-controller, actions-runner-controller, sftpgo-plugin-eventsearch, goreleaser, aws-load-balancer-controller, pluto, apko...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent-fips, k8s-metacollector-fips, goreleaser, flux-source-controller-fips, aws-privateca-issuer-fips, victorialogs-fips, flux-operator-fips, dataplaneapi-fips, kyverno-policy-reporter-plugins-kyverno-fips, ingress-nginx-controller-fips,...

CVE-2026-33810 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent-fips, k8s-metacollector-fips, goreleaser, flux-source-controller-fips, aws-privateca-issuer-fips, victorialogs-fips, flux-operator-fips, dataplaneapi-fips, kyverno-policy-reporter-plugins-kyverno-fips, ingress-nginx-controller-fips,...