GitHub vulnerability