CompaniesGitHubMonthly reportsApril 2026
GitHub in April 2026: incidents, uptime and changes
27incidents posted
10labelled major or critical
93.84%free of major/critical
80.99%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 44 h 17 min, incident time 5.7 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 3 · Major 7 · Minor 17
Major and critical incidents 10
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Disruption with Copilot chat and Copilot Coding Agent | Critical | 3.7 h | resolved | 04-22 | |
| Incident with multiple GitHub services | Critical | 1.3 h | resolved | 04-23 | |
| GitHub search is degraded | Critical | 6.3 h | resolved | 04-27 | |
| Disruption with GitHub's code search | Major | 8.7 h | resolved | 04-01 | |
| GitHub audit logs are unavailable | Major | 4 min | resolved | 04-01 | |
| Disruption with some GitHub services | Major | 25 min | resolved | 04-09 | |
| Disruption with some GitHub services | Major | 4.3 h | resolved | 04-09 | |
| Incident with Pages | Major | 39 min | resolved | 04-13 | |
| Incident with Codespaces | Major | 3.4 h | resolved | 04-16 | |
| Partial degradation for code scanning default setup and for code quality | Major | 16 h | resolved | 04-20 |
Other incidents 17
CVEs published
- CVE-2026-5921 Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attack (CVSS 8.9)
- CVE-2026-4296 Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypass (CVSS 8.8)
- CVE-2026-5512 Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API (CVSS 4.3)
- CVE-2026-3307 Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers (CVSS 2.7)
- CVE-2026-5845 Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Server (CVSS 9.6)
Cite this
GitHub posted 27 status incidents in April 2026 (10 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitHub in April 2026
- Vendor
- GitHub
- Date
- URL
- https://rewindex.com/company/github/2026/04