github mcp server vulnerabilities (CVE)

CVE records published for github mcp server, newest first. Follow to get an email when a new one appears.

1 results

7.5High

CVE-2026-47427 3 months ago

GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler

github github-mcp-server

GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field trigger…