Skip to content
OpenAdvisories

Product · GitHub

github-mcp-server

2 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-47427

    GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler

    GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field trigger…

    GitHub github-mcp-server github.com/github/github-mcp-server Go