CVE-2026-48529
2 advisories.
Go/github.com/github/github-mcp-server CVE-2026-48529: medium 6
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion
Action: Upgrade github.com/github/github-mcp-server to 1.1.2 or later.
go get github.com/github/github-mcp-server@v1.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.22.0 | 1.1.2 | - |
Fixed versions
| 1.1.2 |
Sources
- osv: GHSA-pjp5-fpmr-3349
- https://github.com/github/github-mcp-server/security/advisories/GHSA-pjp5-fpmr-3349
- https://github.com/github/github-mcp-server
CVE-2026-48529 · published · modified · JSON
Go/github.com/github/github-mcp-server CVE-2026-48529: unknown
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server
Action: Upgrade github.com/github/github-mcp-server to 1.1.2 or later.
go get github.com/github/github-mcp-server@v1.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.22.0 | 1.1.2 | - |
Fixed versions
| 1.1.2 |
Sources
- osv: GO-2026-5779
- https://github.com/github/github-mcp-server/security/advisories/GHSA-pjp5-fpmr-3349
CVE-2026-48529 · published · modified · JSON