Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
github/github-mcp-server
main @ 8cd03c0
9
Fixes
1
CVEs
HIGH
Peak severity
44.4%
Coverage
Highlights
Auth Bypass: 5 prior fixes. Scrutinize any change in this area.
pkg/github/ifc_labels.go: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The use of a shared singleton RepoAccessCache led to broken access control (CVE-2026-48529), where subsequent users' requests were evaluated using the credentials of the first authenticated user in lockdown mode. This allowed arbitrary bypass of repository boundaries.
SSRF: The server relied on weak suffix checks when parsing GitHub API hosts, allowing attackers to route requests and leak credentials to malicious domains suffixing 'github.com' or 'ghe.com' (e.g., 'attackergithub.com').
Indirect Prompt Injection: Markdown code block processing failed to strip metadata and instructional strings, exposing LLMs consuming server outputs to indirect prompt injection vectors.