Comment by alphabettsy

It’s as much a vulnerability of the GitHub MCP as SQL injection is a vulnerability of MySQL. The vulnerability results from trusting unsanitized user input rather than the underlying technology.