Github Hub vulnerabilities

• 0xshariq github-mcp-server 0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection CVE-2026-102906 5.3 MediumSeptember 30, 2026
• github mcp server, github-mcp-server +1 more GitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler CVE-2026-47427 Fix available 7.5 HighJuly 28, 2026
• github github-mcp-server GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion CVE-2026-48529 Fix available 6.0 MediumJune 25, 2026
• github enterprise server GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API CVE-2025-6600 6.3 MediumJuly 1, 2025
• github enterprise server Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers CVE-2025-3246 8.6 HighApril 17, 2025
• github enterprise server An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker... CVE-2024-9539 5.7 MediumOctober 11, 2024
• github enterprise server An improper privilege management vulnerability allowed arbitrary workflows to be committed using... CVE-2024-8263 6.2 MediumSeptember 23, 2024
• github enterprise server A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of... CVE-2024-8770 5.8 MediumSeptember 23, 2024
• github enterprise server An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when... CVE-2024-6800 9.5 CriticalAugust 20, 2024
• github enterprise server Incorrect Authorization allows read access to issues in GitHub Enterprise Server CVE-2024-6337 5.9 MediumAugust 20, 2024
• github enterprise server An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an... CVE-2024-7711 5.3 MediumAugust 20, 2024
• github enterprise server GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys CVE-2024-6395 6.3 MediumJuly 16, 2024
• github enterprise server Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure CVE-2024-6336 6.9 MediumJuly 16, 2024
• github enterprise server Improper authorization allows read access to issue content in GitHub Enterprise Server CVE-2024-5817 5.9 MediumJuly 16, 2024
• github enterprise server Improper authorization allows persistent access in GitHub Enterprise Server CVE-2024-5816 6.9 MediumJuly 16, 2024
• github enterprise server Cross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository CVE-2024-5815 6.8 MediumJuly 16, 2024
• github enterprise server Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion CVE-2024-5795 7.7 HighJuly 16, 2024
• github enterprise server Improper Privilege Management allows for access to unauthorized repository content during migration CVE-2024-5566 5.8 MediumJuly 16, 2024
• github enterprise server A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that... CVE-2024-5746 7.6 HighJune 20, 2024
• github enterprise server Improper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console CVE-2024-2443 9.1 CriticalMarch 20, 2024
• github enterprise server Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names CVE-2022-46257 4.3 MediumMarch 7, 2023
• github enterprise server Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site CVE-2023-22380 6.5 MediumFebruary 16, 2023
• github enterprise server Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens CVE-2022-23739 9.8 CriticalJanuary 17, 2023
• github enterprise server Incorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow Scope CVE-2022-46258 6.5 MediumJanuary 9, 2023
• github enterprise server Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages CVE-2022-46256 8.8 HighDecember 14, 2022
• github enterprise server Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE CVE-2022-46255 9.8 CriticalDecember 14, 2022
• github enterprise server Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access CVE-2022-23741 7.2 HighDecember 14, 2022
• github enterprise server Improper Privilege Management in GitHub Enterprise Server leading to page creation and deletion CVE-2022-23737 6.5 MediumDecember 1, 2022
• github enterprise server Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution CVE-2022-23740 8.8 HighNovember 23, 2022
• github enterprise server Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files CVE-2022-23738 5.7 MediumNovember 1, 2022
• github enterprise server Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution CVE-2022-23734 8.8 HighOctober 19, 2022
• github enterprise server Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes CVE-2022-23733 5.4 MediumAugust 2, 2022
• github enterprise server Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections CVE-2022-23732 8.8 HighApril 5, 2022
• github enterprise server Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution CVE-2021-41599 8.8 HighFebruary 17, 2022
• github enterprise server UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user CVE-2021-41598 8.8 HighJanuary 25, 2022
• github enterprise server Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access CVE-2021-22870 6.5 MediumNovember 10, 2021
• github enterprise server Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server CVE-2021-22868 4.3 MediumSeptember 24, 2021
• github enterprise server Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group CVE-2021-22869 9.8 CriticalSeptember 24, 2021
• github enterprise server Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server CVE-2021-22867 6.5 MediumJuly 14, 2021
• github enterprise server UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources CVE-2021-22866 8.8 HighMay 14, 2021
• github enterprise server Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata CVE-2021-22865 6.5 MediumApril 2, 2021
• github enterprise server Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server CVE-2021-22864 8.8 HighMarch 23, 2021
• github, github enterprise server +1 more Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests CVE-2021-22863 8.1 HighMarch 3, 2021
• github, github enterprise server +1 more Improper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks CVE-2021-22862 6.5 MediumMarch 3, 2021
• github, github enterprise server +1 more Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories CVE-2021-22861 6.5 MediumMarch 3, 2021
• github, github enterprise server +1 more Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server CVE-2020-10519 8.8 HighMarch 3, 2021
• github, github enterprise server +1 more Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names CVE-2020-10517 4.3 MediumAugust 27, 2020
• github, github enterprise server +1 more Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server CVE-2020-10518 8.8 HighAugust 27, 2020
• github, github enterprise server +1 more Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member CVE-2020-10516 9.8 CriticalJune 3, 2020
• github The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that... CVE-2017-18365 Public exploit EPSS 21.2% 9.8 CriticalMarch 28, 2019
• Show olderLoading…