An out-of-bounds read vulnerability (CWE-125) exists in GitHub Enterprise Server's Git service (babeld) SSH implementation. The flaw occurs when the session identifier is sized by the current digest length rather than its own, allowing an attacker with SSH access to re-key to a longer hash algorithm and cause adjacent process memory to be signed and returned to the client. This could lead to limited memory disclosure. The issue affects all versions prior to 3.23 and was fixed in versions 3.22.3, 3.21.8, 3.20.10, and 3.19.14. No known exploits in the wild have been reported.