tocsin

Go/github.com/github/github-mcp-server CVE-2026-48529: unknown, EPSS 0.21%

GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server

Action: Upgrade github.com/github/github-mcp-server to 1.1.2 or later.

go get github.com/github/github-mcp-server@v1.1.2

Affected

introducedfixedlast affected
0.22.01.1.2-

Fixed versions

1.1.2

Sources

CVE-2026-48529 · published · modified · JSON