github.com/github/github-mcp-server
GitHub's official MCP Server
View on Github
Activity
- Latest release
- 5d ago
- Total releases
- 65
- Cadence
- ~7 days
- Last 12 months
- 46
Reach
- Stars
- 32.9k
Details
- First release
- Apr 03, 2025
| Version | Released | |
|---|---|---|
v1.12.1
patch
|
v1.12.1
patch
Dependencies (18)
+ 10 more |
|
v1.12.0
minor
|
v1.12.0
minor
Dependencies (18)
+ 10 more |
|
v1.11.0
minor
|
v1.11.0
minor
Dependencies (17)
+ 9 more |
|
v1.10.1
patch
|
v1.10.1
patch
Dependencies (17)
+ 9 more |
|
v1.10.0
minor
|
v1.10.0
minor
Dependencies (17)
+ 9 more |
|
v1.9.0
minor
|
v1.9.0
minor
Dependencies (17)
+ 9 more |
|
v1.8.0
minor
|
v1.8.0
minor
Dependencies (17)
+ 9 more |
|
v1.7.0
minor
|
v1.7.0
minor
Dependencies (17)
+ 9 more |
|
v1.6.0
minor
|
v1.6.0
minor
Dependencies (17)
+ 9 more |
|
v1.5.0
minor
|
v1.5.0
minor
Dependencies (17)
+ 9 more |
|
v1.4.0
minor
|
v1.4.0
minor
Dependencies (16)
+ 8 more |
|
v1.3.0
minor
|
v1.3.0
minor
Dependencies (16)
+ 8 more |
|
v1.2.0
minor
|
v1.2.0
minor
Dependencies (16)
+ 8 more |
|
v1.1.2
patch
|
v1.1.2
patch
Dependencies (16)
+ 8 more |
|
v1.1.1
patch
1 CVE
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.1.1
patch
Dependencies (16)
+ 8 more |
|
v1.1.0
minor
1 CVE
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (16)
+ 8 more |
|
v1.0.5
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.0.5
patch
Dependencies (16)
+ 8 more |
|
v1.0.4
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.0.4
patch
Dependencies (16)
+ 8 more |
|
v1.0.3
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.0.3
patch
Dependencies (16)
+ 8 more |
|
v1.0.2
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.0.2
patch
Dependencies (16)
+ 8 more |
|
v1.0.1
major
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.0.1
major
Dependencies (16)
+ 8 more |
|
v1.0.0
major
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v1.0.0
major
Dependencies (16)
+ 8 more |
|
v0.33.1
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.33.1
patch
Dependencies (16)
+ 8 more |
|
v0.33.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.33.0
minor
Dependencies (16)
+ 8 more |
|
v0.32.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.32.0
minor
Dependencies (16)
+ 8 more |
|
v0.31.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.31.0
minor
Dependencies (16)
+ 8 more |
|
v0.30.3
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.30.3
patch
Dependencies (15)
+ 7 more |
|
v0.30.2
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.30.2
patch
Dependencies (15)
+ 7 more |
|
v0.30.1
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.30.1
patch
Dependencies (15)
+ 7 more |
|
v0.30.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.30.0
minor
Dependencies (15)
+ 7 more |
|
v0.29.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.29.0
minor
Dependencies (16)
+ 8 more |
|
v0.28.1
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.28.1
patch
Dependencies (14)
+ 6 more |
|
v0.28.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.28.0
minor
Dependencies (14)
+ 6 more |
|
v0.27.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.27.0
minor
Dependencies (15)
+ 7 more |
|
v0.26.2
patch
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.26.2
patch
Dependencies (15)
+ 7 more |
|
v0.26.1
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.26.1
minor
Dependencies (15)
+ 7 more |
|
v0.26.0-rc.1
pre
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.26.0-rc.1
pre
Dependencies (15)
+ 7 more |
|
v0.25.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.25.0
minor
Dependencies (15)
+ 7 more |
|
v0.24.1
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.24.1
minor
Dependencies (15)
+ 7 more |
|
v0.22.0
minor
2 CVEs
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev
CVE-2026-48529
GO-2026-5779
GHSA-pjp5-fpmr-3349
Jul 07, 2026
GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion in github.com/github/github-mcp-server Fixed in
1.1.2
Updated Jul 07, 2026 · Source: OSV.dev |
v0.22.0
minor
Dependencies (13)
+ 5 more |
|
v0.21.0
minor
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.21.0
minor
Dependencies (13)
+ 5 more |
|
v0.19.1-test
pre
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.19.1-test
pre
Dependencies (12)
+ 4 more |
|
v0.19.1
patch
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.19.1
patch
Dependencies (12)
+ 4 more |
|
v0.19.0
minor
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.19.0
minor
Dependencies (12)
+ 4 more |
|
v0.18.0
minor
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.18.0
minor
Dependencies (12)
+ 4 more |
|
v0.17.1
patch
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.17.1
patch
Dependencies (12)
+ 4 more |
|
v0.17.0
minor
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.17.0
minor
Dependencies (11)
+ 3 more |
|
v0.16.0
minor
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.16.0
minor
Dependencies (11)
+ 3 more |
|
v0.14.0
minor
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.14.0
minor
Dependencies (11)
+ 3 more |
|
v0.13.0
minor
1 CVE
CVE-2026-47427
GO-2026-6118
GHSA-w4q6-qw23-4rg7
Aug 18, 2026
GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server Fixed in
1.1.0
References Updated Aug 18, 2026 · Source: OSV.dev |
v0.13.0
minor
Dependencies (11)
+ 3 more |