EUVD-2026-116582

A cross-site request forgery vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete stored Slack and Microsoft Teams ChatOps configuration and provider credentials by inducing an authenticated Management Console operator's browser to send a...

CVE-2026-110288

A cross-site request forgery (CSRF) vulnerability exists in GitHub Enterprise Server (versions prior to 3.23) due to a missing CSRF token on the integration removal endpoint. An unauthenticated attacker can induce an authenticated Management Console operator's browser to send a cross-site GET req...