Is GitHub down?

GitHub uptime, as reported

Calculated from status changes we recorded on GitHub's own status page. Scheduled maintenance is not counted as downtime.

Recent status changes

1. OperationalAll Systems Operational17h ago
2. DegradedPartially Degraded Service18h ago
3. OperationalAll Systems Operational3d ago
4. DegradedPartially Degraded Service3d ago
5. OperationalAll Systems Operational7d ago
6. DegradedMinor Service Outage7d ago
7. OperationalAll Systems Operational8d ago
8. DegradedPartially Degraded Service8d ago

Vulnerabilities affecting GitHub

• CVE-2026-76851MediumCVSS 8.822d ago

  A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a privileged service, leading to elevated code execution. Exploitation required pre-receive hook networking to be enabled and either site administrator privileges or write access to a repository containing a configured pre-receive hook. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.20, 3.18.14, 3.19.11, 3.20.7, and 3.21.5. This vulnerability was reported via the GitHub Bug Bounty program.

• CVE-2026-19118MediumCVSS 7.522d ago

  A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.20, 3.18.14, 3.19.11, 3.20.7, and 3.21.5. This vulnerability was reported via the GitHub Bug Bounty program.

• CVE-2026-18730MediumCVSS 7.422d ago

  A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster configuration and issued gateway-to-agent requests whose HMAC authenticated only a timestamp, not the request path or body. An attacker positioned to intercept the outbound request could capture this token and replay it against privileged management agent endpoints. High-availability deployments were not affected due to a topology restriction. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.19, 3.18.13, 3.19.10, 3.20.6, and 3.21.4. This vulnerability was reported via the GitHub Bug Bounty program.

• CVE-2026-47427MediumCVSS 7.51mo ago

  GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first checking whether it is nil, so a completion/complete request with a missing or empty ref field triggers a nil pointer dereference and a Go runtime panic; because the crash occurs before any authentication or token validation, any unauthenticated client able to send JSON-RPC messages can crash the server, resulting in a complete denial of service. This issue is fixed in version 1.1.0.

Other Developer tools tools

GitHub status questions

Is GitHub down right now?

No — GitHub is operational right now. We last checked 7m ago against GitHub's official status page.

Is it GitHub or is it just me?

If this page says operational and you still can't connect, the problem is usually local — DNS, a proxy, SSO, or a single region. GitHub recorded 13 status events in the last 30 days.

How do I get alerted when GitHub goes down?

Add GitHub to your stack in ThreatLoops and outages are pushed to Slack, Microsoft Teams or a webhook — alongside vulnerabilities affecting the same vendor.