Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint parsed user-controlled JSON request bodies without size or depth limits, causing excessive CPU and memory consumption. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.2, 3.19.6, 3.18.9, 3.17.15, and 3.16.18. This vulnerability was reported via the GitHub Bug Bounty program.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-7541 A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted req… https://www.cve.org/CVERecord?id=CVE-2026-7541
Post summary
New Denial‑of‑Service vulnerability disclosed in GitHub Enterprise Server; unauthenticated attackers can cause disruption by sending crafted requests.
CVE-2026-7541 Denial of Service in GitHub Enterprise Server via Deeply Nested JS... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7541 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post announces a DoS vulnerability (CVE‑2026‑7541) in GitHub Enterprise Server involving deeply nested JavaScript, but offers no PoC, attack tool, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | github | enterprise_server | - | - | - |