GitHub Rotates Keys After High-Severity Vulnerability Exposes Credentials

GitHub disclosed and fixed a high-severity "unsafe reflection" vulnerability (CVE-2024-0200, CVSS 7.2) that could allow access to credentials in a production container and rotated potentially exposed keys (including commit signing, Actions, Codespaces, and Dependabot keys); GHES patches and versions are provided. A separate high-severity issue (CVE-2024-0507, CVSS 6.5) that could enable privilege escalation via command injection was also addressed. GitHub reports no evidence of exploitation and urged affected users to import rotated keys.