{"id":"INC-github-k8vbzwqjkxzn","kind":"incident","aliases":[],"related":[],"title":"GitHub: Incident with Webhooks","description":"Between 14:24 and 14:53 UTC on 13 August 2026, a routine background job to delete an organization overwhelmed a key shared database, causing multiple GitHub services to briefly return elevated errors and slower responses. Most affected was the webhook management API, with smaller impact to Git operations, pull requests, issues, packages, sign-in, and Copilot. Impact cleared on its own at about 14:53 UTC once the job finished; we resolved the incident at 15:36 UTC. Affected users may have experienced a brief increase in errors and slower responses, primarily when creating, listing, or updating webhooks, with smaller impacts to pull requests, issues, packages, and Git operations. Failures peaked at about 1% for several minutes around 14:37 UTC. To prevent future incidents, we've already shipped an update that turns on the safer deletion path for organizations, along with caps on deletion holds on databases. Building on these changes, we're auditing all bulk deletion and cleanup jobs that write to shared databases to prevent similar issues in future.","summary":null,"severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"GitHub","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ci","git","github","incident","ops","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"resolved","published_at":"2026-08-13T14:45:40+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","triaged_at":"2026-10-23T21:55:04+00:00","updated_at":"2026-10-23T21:55:04+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'1':131C '13':24C '14':17C,20C,81C,136C '15':93C '2026':26C '24':18C '36':94C '37':137C '53':21C,82C 'affect':53C,96C 'along':158C 'alreadi':145C 'api':58C 'around':135C 'audit':172C 'august':25C 'background':29C 'brief':102C 'briefli':45C 'build':166C 'bulk':174C 'cap':160C 'caus':40C 'chang':169C 'ci':10B 'cleanup':177C 'clear':75C 'copilot':73C 'creat':111C 'databas':39C,165C,183C 'delet':32C,154C,162C,175C 'elev':47C 'error':48C,105C 'experienc':100C 'failur':127C 'finish':87C 'futur':141C,189C 'git':11B,63C,125C 'github':1A,7A,9A,12B,42C 'hold':163C 'impact':61C,74C,118C 'inc':6A 'inc-github-k8vbzwqjkxzn':5A 'incid':2A,13B,91C,142C 'increas':103C 'issu':67C,122C,187C 'job':30C,86C,178C 'k8vbzwqjkxzn':8A 'key':37C 'list':112C 'manag':57C 'may':98C 'minut':134C 'multipl':41C 'op':14B 'oper':64C,126C 'organ':34C,157C 'overwhelm':35C 'packag':68C,123C 'path':155C 'peak':128C 'prevent':140C,185C 'primarili':109C 'pull':65C,120C 're':171C 'request':66C,121C 'resolv':89C 'respons':51C,108C 'return':46C 'routin':28C 'safer':153C 'servic':43C 'sever':133C 'share':38C,182C 'ship':146C 'sign':70C 'sign-in':69C 'similar':186C 'slower':50C,107C 'smaller':60C,117C 'turn':150C 'updat':114C,148C 'user':97C 'utc':22C,83C,95C,138C 've':144C 'vendor':15B 'webhook':4A,56C,115C 'write':180C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-08-13T14:45:40+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"statuspage","external_id":"github:k8vbzwqjkxzn","url":"https://stspg.io/f0cgtdc0kqxg","severity":"medium","published_at":"2026-08-13T14:45:40+00:00","modified_at":"2026-08-31T20:37:37+00:00","first_seen_at":"2026-10-23T19:12:22+00:00","fetched_at":"2026-10-25T12:14:47+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}