Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Enterprise Server
HIGH 7.5
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumpt…
Enterprise Server
CRITICAL 9.1
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and dire…
Mcp Server
HIGH 7.5
GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref withou…
Enterprise Server
MEDIUM 5.0
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App instal…
Enterprise Server
MEDIUM 5.4
A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to execute arbitrary Ja…
Enterprise Server
MEDIUM 6.5
A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to read source code from private …
Enterprise Server
MEDIUM 5.5
A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an org…
Cli
CRITICAL 9.1
GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF …
Enterprise Server
HIGH 8.2
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafte…
Enterprise Server
MEDIUM 5.9
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue H…
Copilot Cli
HIGH 7.8
GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerability has been identified …
Enterprise Server
CRITICAL 9.8
A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access …
Enterprise Server
MEDIUM 6.1
A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential the…
Enterprise Server
HIGH 7.5
A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by …
Enterprise Server
MEDIUM 6.5
An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user acc…
Enterprise Server
CRITICAL 9.6
An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attac…
Enterprise Server
HIGH 8.9
A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environme…
Enterprise Server
HIGH 8.8
An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI valida…
Enterprise Server
MEDIUM 5.4
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task lis…
Enterprise Server
HIGH 8.8
An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to …
Copilot Command Line Interface
HIGH 7.8
The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter ex…
Enterprise Server
MEDIUM 6.5
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge their own pull request into a r…
Enterprise Server
MEDIUM 6.5
A Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to upload unauthorized content to another u…
Enterprise Server
CRITICAL 9.0
An URL redirection vulnerability was identified in GitHub Enterprise Server that allowed attacker-controlled redirects to leak sensitive authorizatio…
Enterprise Server
MEDIUM 5.4
An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker control…
Enterprise Server
MEDIUM 6.1
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements w…
Enterprise Server
CRITICAL 9.6
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allows DOM-based cross-site scripting via Issues se…
Enterprise Server
HIGH 7.2
A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH acces…
Enterprise Server
HIGH 7.6
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting in GitHub Markdown tha…
Enterprise Server
HIGH 7.2
A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting…