CVE-2026-47427

The vulnerability CVE-2026-47427 affects GitHub MCP Server. The CompletionsHandler in pkg/github/server.go dereferences params.Ref without nil-checking, so a completion/complete request with a missing or empty ref can trigger a nil pointer dereference, causing a Go runtime panic and an immediate ...

PT-2026-65504

Name of the Vulnerable Software and Affected Versions GitHub MCP Server versions prior to 1.1.0 Description A nil pointer dereference occurs in the CompletionsHandler function within pkg/github/server.go when processing a completion/complete request. The issue arises because the server accesses t...