Microsoft GitHub Enterprise Server: Multiple Vulnerabilities, CVSS 8.9 (High)

Summary

CERT-Bund issued a security advisory warning of multiple vulnerabilities in Microsoft GitHub Enterprise Server affecting versions prior to 3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, and 3.15.21. The vulnerabilities carry a CVSS Base Score of 8.9 (High) and a CVSS Temporal Score of 7.7 (High), with remote attack capability confirmed. An attacker could exploit these flaws to bypass security controls, execute arbitrary code, and disclose information. Mitigation measures are available and organisations running affected versions should apply patches promptly.

About this source

GovPing monitors CERT-Bund Security Advisories for new data privacy & cybersecurity regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 368 changes logged to date.

What changed

What to do next

1. Update Microsoft GitHub Enterprise Server to patched versions (3.20.1, 3.19.5, 3.18.8, 3.17.14, 3.16.17, or 3.15.21 or later)

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Parties

Related changes

Linux Kernel Multiple DoS Vulnerabilities CVSS 7.5

Urgent Apr 22, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

CPython Vulnerability Allows Remote Attack, CVSS 8.6

Priority review Apr 22, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

DNSdist Multiple DoS Vulnerabilities CVSS 7.5

Priority review Apr 22, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity