GitHub permission flaw lets outsiders delete private repos

Dodo Payments co-founder Ayush Agarwal reported that an outside user with no membership, invitation, or role deleted one of the company's private GitHub repos via the gh CLI, sparking alarm over a GitHub permission flaw.

2026-10-28 ~ 2026-10-28 · 2 related posts

• Outsider with no GitHub role deleted Dodo Payments' private repo, audit log shows — kingslyj · 2026-10-28
• Outsider deletes a private GitHub repo with no org access, and it's unrestorable — pramodk73 · 2026-10-28