GitHub security advisory (AV26-956)
Canadian Cyber Centre urges patches for vulnerabilities in GitHub Enterprise Server 3.17 through 3.22.
The Canadian Centre for Cyber Security issued advisory AV26-956 on September 23, 2026, stating that as of September 22 GitHub Enterprise Server is affected by vulnerabilities. Affected ranges are 3.17.0 before 3.17.21, 3.18.0 before 3.18.15, 3.19.0 before 3.19.12, 3.20.0 before 3.20.8, 3.21.0 before 3.21.6, and 3.22.0 before 3.22.1. The bulletin does not name CVEs or report exploitation and urges administrators to review GitHub release notes and apply updates.
- Canadian Cyber Centre advisory AV26-956, dated September 23, 2026.
- GitHub Enterprise Server 3.17 through 3.22 branches are affected.
- Fixed releases include 3.17.21, 3.18.15, 3.19.12, 3.20.8, 3.21.6, and 3.22.1.
- No CVE identifiers or active exploitation are stated.
- Vendors
- GitHub
- Products
- GitHub Enterprise Server
- Organizations
- Canadian Centre for Cyber Security
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-956 Date: September 23, 2026 As of September 22, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3. 17. 0 Prior to 3.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.