GitHub Blog Search

Search Results for: Security

GitHub security update: revoking weakly-generated SSH keys

GitHub security update: revoking weakly-generated SSH keys

On September 28, 2021, we received notice from the developer Axosoft regarding a vulnerability in a dependency of their popular git GUI client - GitKraken. An underlying issue with a dependency, called `keypair`, resulted in the GitKraken client generating weak SSH keys.

Mike Hanley October 11, 2021