EUVD-2026-41145

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to perform certain write operations on public repositories outside the token's intended scope. This was possible because the authorization...

PT-2026-54645

Name of the Vulnerable Software and Affected Versions GitHub Enterprise Server versions prior to 3.22 Description An incorrect authorization issue allows a user-to-server token scoped to a GitHub App installation to perform write operations on public repositories outside its intended scope. This...