| CVE-2026-6736 |
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated…
|
6.3
Medium
|
May 7, 2026 |
| CVE-2026-5845 |
An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise…
|
7.2
High
|
Apr 21, 2026 |
| CVE-2026-3307 |
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin…
|
5.3
Medium
|
Apr 21, 2026 |
| CVE-2026-5512 |
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated…
|
5.3
Medium
|
Apr 21, 2026 |
| CVE-2026-4296 |
An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to…
|
7.5
High
|
Apr 21, 2026 |
| CVE-2026-4821 |
An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.1
High
|
Apr 21, 2026 |
| CVE-2026-5921 |
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker…
|
8.9
High
|
Apr 21, 2026 |
| CVE-2026-3582 |
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user…
|
5.3
Medium
|
Mar 10, 2026 |
| CVE-2026-2266 |
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based…
|
7.4
High
|
Mar 10, 2026 |
| CVE-2026-3306 |
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read…
|
5.3
Medium
|
Mar 10, 2026 |
| CVE-2026-3854 |
An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.7
High
|
Mar 10, 2026 |
| CVE-2026-1999 |
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge…
|
7.1
High
|
Feb 18, 2026 |
| CVE-2026-1355 |
A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload…
|
6.0
Medium
|
Feb 18, 2026 |
| CVE-2026-0573 |
An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-controlled redirects…
|
7.6
High
|
Feb 18, 2026 |
| CVE-2025-13744 |
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise…
|
8.4
High
|
Jan 6, 2026 |
| CVE-2025-14046 |
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.6
High
|
Dec 11, 2025 |
| CVE-2025-11578 |
A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise…
|
7.5
High
|
Nov 10, 2025 |
| CVE-2025-11892 |
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based…
|
8.6
High
|
Nov 10, 2025 |
| CVE-2025-8447 |
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to…
|
7.0
High
|
Aug 26, 2025 |
| CVE-2025-6981 |
An incorrect authorization vulnerability allowed unauthorized read access to the contents of internal repositories for…
|
5.3
Medium
|
Jul 15, 2025 |
| CVE-2025-3509 |
A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute…
|
7.1
High
|
Apr 17, 2025 |
| CVE-2025-3124 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of…
|
5.3
Medium
|
Apr 17, 2025 |
| CVE-2024-10001 |
A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious…
|
7.1
High
|
Jan 29, 2025 |
| CVE-2025-23369 |
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that…
|
7.6
High
|
Jan 21, 2025 |
| CVE-2024-8810 |
A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from…
|
8.7
High
|
Nov 7, 2024 |