Anyone can Access Deleted and Private Repository Data on GitHub

Anyone can access data from deleted and private repositories on GitHub using Cross Fork Object Reference (CFOR). CFOR allows one repository fork to access sensitive data from another, including private and deleted forks, by using commit hashes. GitHub's design does not permanently delete commit data, making it accessible if at least one fork exists and the commit hash is known.