Skip to contentGithub vulnerabilities
Newest
- github enterprise serverIncomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo filesCVE-2022-237385.7 Medium
- actions runnerGitHub Actions Runner vulnerable to Docker Command EscapingCVE-2022-39321Fix available8.8 High
- github enterprise serverDeserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code ExecutionCVE-2022-237348.8 High
- github cmark-gfm, fedoraproject fedora +1 moreUncontrolled Resource Consumption in cmark-gfmCVE-2022-39209Fix available7.5 High
- actions toolkitDelimiter injection vulnerability in @actions/core exportVariableCVE-2022-35954Fix available5.0 Medium
- github enterprise serverStored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributesCVE-2022-237335.4 Medium
- github trilogyUse of Uninitialized Variable in trilogyCVE-2022-31026Fix available5.9 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protectionsCVE-2022-237328.8 High
- gjtorikian commonmarker, github cmark-gfm +1 moreCommonMarker Integer Overflow VulnerabilityCVE-2024-22051Fix available9.8 Critical
- github cmark-gfm, fedoraproject fedora +1 moreInteger overflow in table parsing extension leads to heap memory corruptionCVE-2022-24724Fix available8.8 High
- github view component, viewcomponent +1 moreCross-site Scripting in view_componentCVE-2022-24722Fix available8.1 High
- github enterprise serverImproper control flow in GitHub Enterprise Server hosted Pages leads to remote code executionCVE-2021-415998.8 High
- github gh-ostCommand injection in gh-ostCVE-2022-21687Fix available6.8 Medium
- github enterprise serverUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to userCVE-2021-415988.8 High
- github enterprise serverPath traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read accessCVE-2021-228706.5 Medium
- github enterprise serverUnsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise ServerCVE-2021-228684.3 Medium
- github enterprise serverImproper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control groupCVE-2021-228699.8 Critical
- github paste-markdownClipboard-based DOM-XSSCVE-2021-37700Fix available6.5 Medium
- github enterprise serverUnsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise ServerCVE-2021-228676.5 Medium
- github codeql action, codeql-action +1 moreCodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecatedCVE-2021-326384.4 Medium
- github enterprise serverUI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resourcesCVE-2021-228668.8 High
- github enterprise serverImproper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadataCVE-2021-228656.5 Medium
- github enterprise serverUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerCVE-2021-228648.8 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requestsCVE-2021-228638.1 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forksCVE-2021-228626.5 Medium
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositoriesCVE-2021-228616.5 Medium
- github, github enterprise server +1 moreUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerCVE-2020-105198.8 High
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to the enumeration of private repository namesCVE-2020-105174.3 Medium
- github, github enterprise server +1 moreUnsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise ServerCVE-2020-105188.8 High
- github cmark-gfm, github flavored markdown project flavored markdown, fedoraproject fedora +2 moreDenial of service in table parsing in cmark-gfmCVE-2020-5238Fix available6.5 Medium
- github, github enterprise server +1 moreImproper access control in GitHub Enterprise Server leading to privilege escalation of organization memberCVE-2020-105169.8 Critical
- microsoft codeql, github vscode-codeql +1 moreIf an attacker can get a user to open a specially prepared directory tree as a workspace in...CVE-2019-167657.4 High
- githubThe Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that...CVE-2017-18365Public exploitEPSS 21.2%9.8 Critical
- github hubHub Package Arbitrary File OverwriteCVE-2014-0177Fix available3.6 Low
- github gaug.es, roderick baier weberknecht +1 moreWeberknecht, as used in GitHub Gaug.es and other products, does not verify that the server...CVE-2012-58145.8 Medium
- githubGitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values...CVE-2012-20557.5 High