devtake.dev
AI Security Open Source Hardware Apple Policy

#cve-2026-3854

RSS
Related: #dev-tools · 1 #github · 1 #github-actions · 1 #rce · 1 #security · 1 #supply-chain · 1 #wiz · 1
GitHub branding image used by Wiz Research in their CVE-2026-3854 writeup.
Security·

Wiz found an RCE in GitHub's git-push pipeline. The patch shipped in six hours.

CVE-2026-3854 is a CVSS 8.7 RCE in GitHub's git-push pipeline. github.com fixed it within hours. 88% of Enterprise Server installs were still vulnerable at disclosure.