Follow-up: Rejected CVE-2026-4821 referenced on March/April 2026 Enterprise Server Release notes

[cfi-gb]

Code of Conduct

• I have read and agree to the GitHub Docs project's Code of Conduct

What article on docs.github.com is affected?

• https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.24
• https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.21
• https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.17
• https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.14
• https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.8
• https://docs.github.com/en/enterprise-server@3.19/admin/release-notes#3.19.5
• https://docs.github.com/en/enterprise-server@3.20/admin/release-notes#3.20.1

What part(s) of the article would you like to see updated?

On the release notes above the CVE-2026-4821 is referred which got into "rejected" state with the following rationale:

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it was published in error.

Either this was no vulnerability at all or got a different CVE assigned (not sure which is the case here) and this probably would need some investigation by GitHub staff.

Additional information

I had already opened #44689 in the past which got closed with a reference to the GitHub support. But i'm not able to create a support ticket for GitHub Enterprise Server in my support portal (i just can't choose this product) so i'm re-raising this issue here for now.

Maybe it helps but in the past such issues have been actually handled in the repository here directly:

• Possible wrong CVEs linked on recent GitHub Server releases 3.8.13, 3.9.8 and 3.10.5 #31137
• Repo sync #31348
• https://github.com/github/docs/pull/31348/files#diff-b1770369ec045488b182dc5194f0cdf245c7a8d95f470ceec491d65c219712b8

and it seems updated in some private repository.