Rate limits for private vulnerability reports

UpdateOct 1, 20262d2 days ago·Unverified·Added Oct 2, 2026

Open source maintainers are receiving more low-quality and automated vulnerability reports, which can bury the reports that matter. Rate limits cap how many new reports a single account can submit in a day, both to your repository and across GitHub. This helps protect you from bulk and automated submissions, while legitimate researchers can still reach you.

Topics: Security, Observability