{"id":"GO-2026-6118","revision":"ed6b48c74ac240e39d5c1c2da923384e","records":[{"revision":"ed6b48c74ac240e39d5c1c2da923384e","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6118","aliases":["CVE-2026-47427","GHSA-w4q6-qw23-4rg7"],"title":"GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server","description":"GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler in github.com/github/github-mcp-server","state":0,"publishedAt":"2026-08-18T14:32:29+00:00","modifiedAt":"2026-08-18T15:00:19.847206+00:00","affected":[{"ecosystem":"Go","name":"github.com/github/github-mcp-server","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.1.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/github/github-mcp-server/security/advisories/GHSA-w4q6-qw23-4rg7","https://github.com/github/github-mcp-server/commit/c88d2ecdd3bb07f7bdd75296e3ee676febf14f58","https://github.com/github/github-mcp-server/pull/2502","https://github.com/github/github-mcp-server/releases/tag/v1.1.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6118","license":"OSV · upstream source license applies","key":"osv:GO-2026-6118","identifiers":["GO-2026-6118","CVE-2026-47427","GHSA-w4q6-qw23-4rg7"]},"retained":false,"historicalAffected":[]}],"coverage":[]}