From 5307ab77e1751c0b17e0149278037f4f058f02f2 Mon Sep 17 00:00:00 2001
From: cookesan <6601329+cookesan@users.noreply.github.com>
Date: Mon, 29 Jun 2026 18:07:39 -0400
Subject: [PATCH] Add GitHub MCP Server lockdown fix references

---
 .../GHSA-pjp5-fpmr-3349/GHSA-pjp5-fpmr-3349.json   | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/advisories/github-reviewed/2026/06/GHSA-pjp5-fpmr-3349/GHSA-pjp5-fpmr-3349.json b/advisories/github-reviewed/2026/06/GHSA-pjp5-fpmr-3349/GHSA-pjp5-fpmr-3349.json
index 36d4c81d05dd2..a4c80e04dd551 100644
--- a/advisories/github-reviewed/2026/06/GHSA-pjp5-fpmr-3349/GHSA-pjp5-fpmr-3349.json
+++ b/advisories/github-reviewed/2026/06/GHSA-pjp5-fpmr-3349/GHSA-pjp5-fpmr-3349.json
@@ -40,6 +40,18 @@
       "type": "WEB",
       "url": "https://github.com/github/github-mcp-server/security/advisories/GHSA-pjp5-fpmr-3349"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/github/github-mcp-server/pull/2571"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/github/github-mcp-server/commit/b5397f6e3305531a1c534b90b2d347a70fa84da9"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/github/github-mcp-server/releases/tag/v1.1.2"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/github/github-mcp-server"
@@ -54,4 +66,4 @@
     "github_reviewed_at": "2026-06-25T21:32:09Z",
     "nvd_published_at": null
   }
-}
\ No newline at end of file
+}