GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) in early March that could have allowed attackers to access millions of private repositories. The flaw posed a significant risk to the security of private codebases and sensitive information stored on the platform. The vulnerability has been fixed by GitHub to prevent unauthorized access to private repositories through remote code execution attacks.