GitHub security advisory (AV26-956)

Canadian Centre for Cyber Security Version 1 original current

Imported from official source

Serial Number: AV26-956Date: September 23, 2026 As of September 22, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.17.0 Prior to 3.17.21 3.18.0 Prior to 3.18.15 3.19.0 Prior to 3.19.12 3.20.0 Prior to 3.20.8 3.21.0 Prior to 3.21.6 3.22.0 Prior to 3.22.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Release notes - GitHub Enterprise Server 3.17 Docs  Release notes - GitHub Enterprise Server 3.18 Docs Release notes - GitHub Enterprise Server 3.19 Docs Release notes - GitHub Enterprise Server 3.20 Docs Release notes - GitHub Enterprise Server 3.21 Docs Release notes - GitHub Enterprise Server 3.22 Docs GitHub Enterprise Server releases - GitHub Enterprise Server 3.19 Docs

This version

Version
1 of 1
Recorded
September 23, 2026 18:00
Change
Initial
Content hash
c30fbe79fc399e509fb9e3b64c9927b9
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.