A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted re…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 7, 2026 · NIST NVD

   Detected

   A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint parsed user-controlled JSON request bodies without size or depth limits, causing excessive CPU and memory consumption. This vulnerability affect

2. Jun 17, 2026 · NIST NVD

   Updated

   A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint parsed user-controlled JSON request bodies without size or depth limits, causing excessive CPU and memory consumption. This vulnerability affect

Affected

• cpe github/enterprise serverversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-7541

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-7541

  A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint parsed user-controlled J

  nvd.nist.gov

References

• Release Notes · docs.github.com
• Release Notes · docs.github.com
• Release Notes · docs.github.com
• Release Notes · docs.github.com
• Release Notes · docs.github.com