CVE-2026-3854 (CVSS 8.7) enabled GitHub RCE via git push, risking cross-tenant access to millions of repositories.
The now‑patched flaw allowed authenticated users to execute arbitrary code via crafted git push requests, affecting ...
In GitHub and GitHub Enterprise Server, attackers with push rights to repositories can inject malicious code. Updates fix ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results