GitHub · product
GitHub Enterprise Server
46 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 46 is a mark on the map. Named now: 1 to 26, most at risk first.
- Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution
- Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution
- Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages
- Improper input validation vulnerability was identified in GitHub Enterprise Server that allowed privilege escalation in the Management Console
- Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections
- Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member
- Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE
- An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed s…
- Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata
- Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens
- Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution
- Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group
- Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access
- UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user
- Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access
- Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names
- UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources
- Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests
- Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories
- Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- A Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker with the Site Administrator role to gain arbitrary code execution c…
- Improper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.