Evidence indicates that GitHub is affected by remote code execution. Reported affected versions include < 1.83.11.
Why This Matters
The evidence matters to defenders using GitHub because it could let an attacker run code in affected environments.
Recommended Action
block POST /guardrails/test_custom_code at your reverse proxy or API gateway. Identify deployments of GitHub matching the evidenced affected versions: < 1.83.11.
Affected