GitHub is now also a CVE CNA and can issue its own CVE numbers for bugs disclosed in projects hosted on the platform.

The official PHP Git server has been compromised in a potential attempt to plant malware in the code base of the PHP project.