Known Vulnerabilities for Github-mcp-server by Github
Listed below are 10 of the newest known vulnerabilities associated with "Github-mcp-server" by "Github".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-97731 json | MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Am... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-90818 json | A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the functi... | Not Provided | 2026-09-14 | 2026-09-16 |
| CVE-2026-90814 json | A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRe... | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-88881 json | Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header when int... | Not Provided | 2026-09-10 | 2026-09-15 |
| CVE-2026-86321 json | A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this issue is the function JsonLoader.fromURL... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-86317 json | A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of t... | Not Provided | 2026-09-07 | 2026-09-08 |
| CVE-2026-81100 json | tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/http... | Not Provided | 2026-08-27 | 2026-08-29 |
| CVE-2026-79775 json | rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archiv... | Not Provided | 2026-08-25 | 2026-08-29 |
| CVE-2026-78147 json | A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the fil... | Not Provided | 2026-08-23 | 2026-08-27 |
| CVE-2026-77987 json | A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The not... | Not Provided | 2026-09-22 | 2026-09-23 |