Known Vulnerabilities for Github-mcp-server by Github
Listed below are 10 of the newest known vulnerabilities associated with "Github-mcp-server" by "Github".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-118237 json | An out-of-bounds read vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). When proving poss... | Not Provided | 2026-11-03 | 2026-11-06 |
| CVE-2026-116369 json | A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.0. Impacted is the function handleListIs... | Not Provided | 2026-10-26 | 2026-10-31 |
| CVE-2026-112338 json | Wazuh from 4.3.0 before 4.14.9 contains a server-side request forgery vulnerability in the GitHub module (wm_github.c) that t... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-110288 json | A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacke... | Not Provided | 2026-11-03 | 2026-11-06 |
| CVE-2026-109408 json | vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three st... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-105299 json | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_req... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-105298 json | Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-heade... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-105297 json | Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its ow... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-104608 json | A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held ref... | Not Provided | 2026-11-03 | 2026-11-06 |
| CVE-2026-103620 json | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with ... | Not Provided | 2026-10-06 | 2026-10-07 |