GitHub_P

Latest CVEs · RSS

• CVE-2026-96890 2026-10-06 · CVSS 8.7
  A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to is
• CVE-2026-103620 2026-10-06 · CVSS 6.0
  A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current
• CVE-2026-75101 2026-09-22 · CVSS 6.0
  An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the instance to read the raw diff or pat
• CVE-2026-77912 2026-09-22 · CVSS 7.4
  A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML att
• CVE-2026-77987 2026-09-22 · CVSS 9.3
  A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The notebook viewer validated the scheme a
• CVE-2026-76851 2026-09-01 · CVSS 7.7
  A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient n
• CVE-2026-19118 2026-09-01 · CVSS 7.7
  A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an
• CVE-2026-18730 2026-09-01 · CVSS 8.2
  A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API t
• CVE-2026-15996 2026-08-05 · CVSS 6.6
  A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exh
• CVE-2026-17556 2026-08-05 · CVSS 8.8
  A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on
• CVE-2026-15783 2026-07-17 · CVSS 5.3
  A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read
• CVE-2026-15343 2026-07-17 · CVSS 8.6
  A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker who had code execution inside the Dependabot updater containe
• CVE-2026-15007 2026-07-17 · CVSS 5.7
  A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repos
• CVE-2026-14340 2026-07-01 · CVSS 5.3
  An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a user-to-server token scoped to a GitHub App installation to p
• CVE-2026-10585 2026-06-30 · CVSS 6.3
  A stored cross-site scripting vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to execute arbitrary JavaScript in
• CVE-2026-9132 2026-06-30 · CVSS 6.0
  A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to read source code from private repositorie
• CVE-2026-9106 2026-06-30 · CVSS 4.8
  A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed an OAuth application to gain unintended access to an organization's
• CVE-2026-9312 2026-05-27 · CVSS 9.2
  A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests
• CVE-2026-8606 2026-05-26 · CVSS 7.0
  A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause the server to issue HTTP request
• CVE-2026-8106 2026-05-07 · CVSS 5.9
  A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft. The red
• CVE-2026-8034 2026-05-07 · CVSS 7.9
  A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal se
• CVE-2026-7541 2026-05-07 · CVSS 6.3
  A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending cra
• CVE-2026-6736 2026-05-07 · CVSS 6.3
  An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypas
• CVE-2026-5845 2026-04-21 · CVSS 7.2
  An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to acce
• CVE-2026-3307 2026-04-21 · CVSS 5.3
  An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secr