GITHUB ISSUES $100,000 BOUNTY FOR CRITICAL RCE VULNERABILITY DISCLOSED BY @SAGITZ_

Summary from the TLDR InfoSec newsletter

GitHub paid researcher @sagitz_ a $100,000 bounty, reportedly among the largest in its Vulnerability Reward Program, for CVE-2026-3854, an unauthenticated remote code execution flaw in the handling of crafted repository URLs.