[container-image-scan] Container findings for ghcr.io/github/github-mcp-server

[github-actions]

Summary

Image: ghcr.io/github/github-mcp-server:v1.7.0@sha256:c491ffdf6f4c85cb5397021bc655edb8ab825c6f5f568e7597d77a1bd7c4d308

Grype found 1 Critical and 2 High vulnerabilities, 2 Medium, plus license policy violations.

Vulnerabilities

Critical severity (1)

CVE / ID	Package	Installed	Fix
[CVE-2026-5450]((securitytracker.debian.org/redacted)	libc6	2.36-9+deb12u14	—

High severity (2)

CVE / ID	Package	Installed	Fix
[CVE-2026-5928]((securitytracker.debian.org/redacted)	libc6	2.36-9+deb12u14	—
[CVE-2026-5435]((securitytracker.debian.org/redacted)	libc6	2.36-9+deb12u14	—

Medium severity (2)

CVE / ID	Package	Installed	Fix
[CVE-2026-42767]((securitytracker.debian.org/redacted)	libssl3	3.0.20-1~deb12u2	—
[CVE-2026-6238]((securitytracker.debian.org/redacted)	libc6	2.36-9+deb12u14	—

License Violations

License policy violations

Package	Licenses
tzdata	public-domain
libc6	GPL-2.0-only, HPND, LGPL-2.1-or-later, Spencer-94

Remediation

• Rebuild on Debian Bookworm base with updated libc6 (watch Debian security tracker for patched versions).
• Update OpenSSL (libssl3) to resolve CVE-2026-42767.
• Review public-domain and HPND license entries against policy.

Generated by 🛡️ Daily Container Image Security Scan · sonnet46 · 161.6 AIC · ⌖ 6.65 AIC · ⊞ 4.5K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 6.3 AIC · ⌖ 7.91 AIC · ⊞ 8.7K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 3.82 AIC · ⌖ 11.8 AIC · ⊞ 8.7K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 2.66 AIC · ⌖ 17.5 AIC · ⊞ 8.7K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 4.35 AIC · ⌖ 7.36 AIC · ⊞ 8.7K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 2.8 AIC · ⌖ 9.73 AIC · ⊞ 8.7K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 2.67 AIC · ⌖ 7.84 AIC · ⊞ 8.7K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 2.87 AIC · ⌖ 7.42 AIC · ⊞ 8.8K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 5.32 AIC · ⌖ 12.3 AIC · ⊞ 8.8K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 3.44 AIC · ⌖ 7.48 AIC · ⊞ 8.8K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 3.61 AIC · ⌖ 7.34 AIC · ⊞ 8.8K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 3.79 AIC · ⌖ 8.31 AIC · ⊞ 8.8K · ◷