| CVE-2026-118237 |
Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service
|
5.3
Medium
|
Nov 3, 2026 |
| CVE-2026-110288 |
Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console
|
5.3
Medium
|
Nov 3, 2026 |
| CVE-2026-104608 |
Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service
|
7.7
High
|
Nov 3, 2026 |
| CVE-2026-96890 |
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a…
|
8.7
High
|
Oct 6, 2026 |
| CVE-2026-103620 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository…
|
6.0
Medium
|
Oct 6, 2026 |
| CVE-2026-75101 |
An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user…
|
6.0
Medium
|
Sep 22, 2026 |
| CVE-2026-77912 |
A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an…
|
7.4
High
|
Sep 22, 2026 |
| CVE-2026-77987 |
A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server
|
9.3
Critical
|
Sep 22, 2026 |
| CVE-2026-76851 |
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code…
|
7.7
High
|
Sep 1, 2026 |
| CVE-2026-19118 |
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed…
|
7.7
High
|
Sep 1, 2026 |
| CVE-2026-18730 |
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an…
|
8.2
High
|
Sep 1, 2026 |
| CVE-2026-15996 |
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to…
|
6.6
Medium
|
Aug 5, 2026 |
| CVE-2026-17556 |
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to…
|
8.8
High
|
Aug 5, 2026 |
| CVE-2026-15783 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with…
|
5.3
Medium
|
Jul 17, 2026 |
| CVE-2026-15343 |
Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file paths
|
8.6
High
|
Jul 17, 2026 |
| CVE-2026-15007 |
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause…
|
5.7
Medium
|
Jul 17, 2026 |
| CVE-2026-14340 |
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server…
|
5.3
Medium
|
Jul 1, 2026 |
| CVE-2026-10585 |
A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server that allowed an authenticated…
|
6.3
Medium
|
Jun 30, 2026 |
| CVE-2026-9132 |
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to…
|
6.0
Medium
|
Jun 30, 2026 |
| CVE-2026-9106 |
A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to…
|
4.8
Medium
|
Jun 30, 2026 |
| CVE-2026-9312 |
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an…
|
9.2
Critical
|
May 27, 2026 |
| CVE-2026-8606 |
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker…
|
7.0
High
|
May 26, 2026 |
| CVE-2026-8106 |
A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page…
|
5.9
Medium
|
May 7, 2026 |
| CVE-2026-8034 |
A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that…
|
7.9
High
|
May 7, 2026 |
| CVE-2026-7541 |
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to…
|
6.3
Medium
|
May 7, 2026 |