GitHub Enterprise Server 3.20.3 Released With Fox for Critical Vulnerabilities

Cybersecuritynews •Abinaya • May 27, 2026

GitHub has shipped GitHub Enterprise Server (GHES) 3.20.3 as a security‑driven patch release that fixes multiple critical and high‑severity vulnerabilities and rotates the signing key used to validate GHES release packages. Organizations running any earlier 3.20.x build is strongly encouraged to move to this version to close serious gaps affecting network‑exposed and multi‑tenant deployments. A […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GitHub Enterprise Server 3.20.3 Patch Addresses Critical Vulnerabilities GitHub released Enterprise Server (GHES) version 3.20.3 on May 26, 2026, to address multiple critical and high-severity vulnerabilities. These flaws could allow attackers to access internal services, escalate privileges, and extract sensitive data. The update mandates that administrators rotate cryptographic signing keys before applying the patch. Organizations using earlier 3.20.x versions are strongly encouraged to upgrade to mitigate risks associated with network-exposed and multi-tenant deployments. Specific CVEs were not disclosed in the articles, but the vulnerabilities are deemed serious enough to warrant immediate action from affected organizations. 3 sources 74

Extracted Entities

Platforms (1)

GitHub Enterprise Server