Please report security vulnerabilities privately through GitHub Private Vulnerability Reporting:

https://github.com/LurigeLars/github-mcp-server/security/advisories/new

Do not open a public issue for a suspected vulnerability, proof of concept, exploit details, credentials, tokens, cookies, private endpoints, or other sensitive material.

Please include enough information to reproduce and assess the issue, such as the affected component/version, impact, reproduction steps, and any relevant environment details. Redact secrets and personal data.

If the issue is a normal software bug without a security impact, use the public bug-report form instead.

Non-security bugs should be reported through GitHub Issues:

https://github.com/LurigeLars/github-mcp-server/issues/new?template=bug_report.yml

Keep security-sensitive information out of public bug reports.