Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Enterprise Server
CRITICAL 9.1
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console t…
Enterprise Server
CRITICAL 9.1
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console t…
Enterprise Server
CRITICAL 9.1
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console t…
Enterprise Server
CRITICAL 9.1
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console t…
Enterprise Server
CRITICAL 9.1
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console t…
Enterprise Server
HIGH 8.0
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console t…
Enterprise Server
MEDIUM 6.1
Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires use…
Enterprise Server
MEDIUM 6.5
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by d…
Enterprise Server
CRITICAL 9.8
An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead …
Enterprise Server
HIGH 8.8
An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability…
Cmark Gfm
CRITICAL 9.8
CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated rem…
Enterprise Server
HIGH 7.5
An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed a bypass of Private Mode by using a specially crafte…
Enterprise Server
MEDIUM 5.5
Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must ha…
Enterprise Server
MEDIUM 6.5
An insertion of sensitive information into the log file in the audit log in GitHub Enterprise Server was identified that could allow an attacker to g…
Enterprise Server
MEDIUM 5.7
An insertion of sensitive information into log file vulnerability was identified in the log files for a GitHub Enterprise Server back-end service tha…
Enterprise Server
HIGH 7.5
An insufficient entropy vulnerability was identified in GitHub Enterprise Server (GHES) that allowed an attacker to brute force a user invitation to …
Enterprise Server
HIGH 7.0
A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs…
Enterprise Server
HIGH 8.8
Improper privilege management in all versions of GitHub Enterprise Server allows users with authorized access to the management console with an edito…
Enterprise Server
MEDIUM 5.3
Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check r…
Enterprise Server
MEDIUM 6.5
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a r…
Enterprise Server
MEDIUM 5.3
An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access …
Enterprise Server
MEDIUM 6.5
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a r…
Enterprise Server
HIGH 7.1
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff within…
Cmark Gfm
HIGH 7.5
cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polyno…
Pull Requests And Issues
HIGH 7.8
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
Enterprise Server
MEDIUM 5.3
An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do…
Enterprise Server
MEDIUM 5.3
An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret …
Cmark Gfm
HIGH 7.5
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may…
Cmark Gfm
HIGH 7.5
cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may…
Enterprise Server
HIGH 8.8
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To ex…