| CVE-2026-6736 |
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated…
|
6.3
Moyenne
|
7 mai 2026 |
| CVE-2026-5845 |
An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise…
|
7.2
Élevée
|
21 avr. 2026 |
| CVE-2026-3307 |
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin…
|
5.3
Moyenne
|
21 avr. 2026 |
| CVE-2026-5512 |
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated…
|
5.3
Moyenne
|
21 avr. 2026 |
| CVE-2026-4296 |
An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to…
|
7.5
Élevée
|
21 avr. 2026 |
| CVE-2026-4821 |
An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.1
Élevée
|
21 avr. 2026 |
| CVE-2026-5921 |
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker…
|
8.9
Élevée
|
21 avr. 2026 |
| CVE-2026-3582 |
An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user…
|
5.3
Moyenne
|
10 mars 2026 |
| CVE-2026-2266 |
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based…
|
7.4
Élevée
|
10 mars 2026 |
| CVE-2026-3306 |
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read…
|
5.3
Moyenne
|
10 mars 2026 |
| CVE-2026-3854 |
An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.7
Élevée
|
10 mars 2026 |
| CVE-2026-1999 |
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge…
|
7.1
Élevée
|
18 févr. 2026 |
| CVE-2026-1355 |
A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload…
|
6.0
Moyenne
|
18 févr. 2026 |
| CVE-2026-0573 |
An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-controlled redirects…
|
7.6
Élevée
|
18 févr. 2026 |
| CVE-2025-13744 |
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise…
|
8.4
Élevée
|
6 janv. 2026 |
| CVE-2025-14046 |
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed…
|
8.6
Élevée
|
11 déc. 2025 |
| CVE-2025-11578 |
A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise…
|
7.5
Élevée
|
10 nov. 2025 |
| CVE-2025-11892 |
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based…
|
8.6
Élevée
|
10 nov. 2025 |
| CVE-2025-8447 |
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to…
|
7.0
Élevée
|
26 août 2025 |
| CVE-2025-6981 |
An incorrect authorization vulnerability allowed unauthorized read access to the contents of internal repositories for…
|
5.3
Moyenne
|
15 juil. 2025 |
| CVE-2025-3509 |
A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute…
|
7.1
Élevée
|
17 avr. 2025 |
| CVE-2025-3124 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of…
|
5.3
Moyenne
|
17 avr. 2025 |
| CVE-2024-10001 |
A Code Injection vulnerability was identified in GitHub Enterprise Server that allowed attackers to inject malicious…
|
7.1
Élevée
|
29 janv. 2025 |
| CVE-2025-23369 |
An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that…
|
7.6
Élevée
|
21 janv. 2025 |
| CVE-2024-8810 |
A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from…
|
8.7
Élevée
|
7 nov. 2024 |