GitHub · weakness class
Information Disclosure
12 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.
- CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts
- Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files
- Sensitive Information in Log File in GitHub Enterprise Server
- Information disclosure in GitHub Enterprise Server leading to private repository leakage
- An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user…
- Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names
- Sensitive Information in Log File in GitHub Enterprise Server
- GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys
- Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure
- CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated
- GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API
- Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.