Mcp Server vulnerabilities

1 known vulnerability in Mcp Server from GitHub. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  github-mcp-server: NULL Pointer Dereference

  CVE-2026-47427Jul 28, 2026GitHub

  GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers