| CVE-2026-118237 |
Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service
|
5.3
Moyenne
|
3 nov. 2026 |
| CVE-2026-110288 |
Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console
|
5.3
Moyenne
|
3 nov. 2026 |
| CVE-2026-104608 |
Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service
|
7.7
Élevée
|
3 nov. 2026 |
| CVE-2026-96890 |
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a…
|
8.7
Élevée
|
6 oct. 2026 |
| CVE-2026-103620 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository…
|
6.0
Moyenne
|
6 oct. 2026 |
| CVE-2026-75101 |
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user…
|
6.0
Moyenne
|
22 sept. 2026 |
| CVE-2026-77912 |
A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an…
|
7.4
Élevée
|
22 sept. 2026 |
| CVE-2026-77987 |
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server
|
9.3
Critique
|
22 sept. 2026 |
| CVE-2026-76851 |
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code…
|
7.7
Élevée
|
1 sept. 2026 |
| CVE-2026-19118 |
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed…
|
7.7
Élevée
|
1 sept. 2026 |
| CVE-2026-18730 |
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an…
|
8.2
Élevée
|
1 sept. 2026 |
| CVE-2026-15996 |
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to…
|
6.6
Moyenne
|
5 août 2026 |
| CVE-2026-17556 |
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to…
|
8.8
Élevée
|
5 août 2026 |
| CVE-2026-15783 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with…
|
5.3
Moyenne
|
17 juil. 2026 |
| CVE-2026-15343 |
Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths
|
8.6
Élevée
|
17 juil. 2026 |
| CVE-2026-15007 |
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause…
|
5.7
Moyenne
|
17 juil. 2026 |
| CVE-2026-14340 |
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server…
|
5.3
Moyenne
|
1 juil. 2026 |
| CVE-2026-10585 |
A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server that allowed an authenticated…
|
6.3
Moyenne
|
30 juin 2026 |
| CVE-2026-9132 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to…
|
6.0
Moyenne
|
30 juin 2026 |
| CVE-2026-9106 |
A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to…
|
4.8
Moyenne
|
30 juin 2026 |
| CVE-2026-9312 |
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an…
|
9.2
Critique
|
27 mai 2026 |
| CVE-2026-8606 |
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker…
|
7.0
Élevée
|
26 mai 2026 |
| CVE-2026-8106 |
A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page…
|
5.9
Moyenne
|
7 mai 2026 |
| CVE-2026-8034 |
A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that…
|
7.9
Élevée
|
7 mai 2026 |
| CVE-2026-7541 |
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to…
|
6.3
Moyenne
|
7 mai 2026 |