GitHub · product
Enterprise Server
93 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
- likely to be exploited
- 3
Every one of the 93 is a mark on the map. Named now: 1 to 26, most at risk first.
- Github Enterprise - Remote Code Execution
- Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server
- Remote code execution via git push option injection in GitHub Enterprise Server
- An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted…
- Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpoint
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions…
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- Improper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validation
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console
- Command injection vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Mangement Console
- Remote Code Execution in GitHub Enterprise Server Allowed Administrators to gain SSH access to the appliance
- Pre-Receive Hook Remote Code Execution vulnerability was identified in GitHub Enterprise Server that allowing Privilege Escalation
- Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dep…
- Improper Privilege Management was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console
- Path traversal in GitHub Enterprise Server leading to remote code execution
- Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
- GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
- Pre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalation
- Code injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actions
- Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services
- Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.