{"items":[{"id":"CVE-2026-47427","published":"2026-07-28T15:32:27.294Z","updated":"2026-07-28T17:31:19.108Z","title":"GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler","severity":"HIGH","score":7.5,"vendor":"github","product":"github-mcp-server","kev":false,"epss":0.00772,"kevAdded":null},{"id":"CVE-2026-48529","published":"2026-06-26T16:33:32.688Z","updated":"2026-06-27T02:43:34.588Z","title":"GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion","severity":"MEDIUM","score":6,"vendor":"github","product":"github-mcp-server","kev":false,"epss":0.00166,"kevAdded":null}]}