Threats tagged 'ghsa-3738-jvgh-jh3h'

A denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated attackers to disrupt service by sending crafted requests with deeply nested JSON payloads to an unauthenticated API endpoint. The endpoint did not limit JSON size or depth, leading to excessive CPU and memory usage. This issue affected all versions prior to 3.21 and was fixed in several patch releases including 3.20.2, 3.19.6, 3.18.9, 3.17.15, and 3.16.18.