GitHub fixes vulnerabilities in four Enterprise Server release lines
GitHub says self-hosted Enterprise Server has vulnerabilities in four release lines. Administrators should move to the patched versions.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
GitHub disclosed vulnerabilities in Enterprise Server, its self-hosted code platform, as of November 3, 2026. [1]
Affected are 3.19.0 up to but not including 3.19.14, 3.20.0 before 3.20.10, 3.21.0 before 3.21.8, and 3.22.0 before 3.22.3. Those later versions are the fixed releases. The advisory excerpt gives no CVE identifiers, does not describe the flaws and does not say whether any are exploited. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Canadian Centre for Cyber Security
GitHub security advisory (AV26-1126)