GitHub · product
GitHub Enterprise Server
46 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 46 is a mark on the map. Named now: 27 to 46, most at risk first.
- Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files
- Improper Privilege Management in GitHub Enterprise Server leading to page creation and deletion
- Incorrect Authorization allows read access to issues in GitHub Enterprise Server
- Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site
- An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user…
- Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes
- Incorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow Scope
- Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names
- Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed resource exhaustion
- Improper authorization allows read access to issue content in GitHub Enterprise Server
- Improper authorization allows persistent access in GitHub Enterprise Server
- An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public r…
- GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys
- Improper Privilege Management allows for access to unauthorized repository content during migration
- An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This vulnerability affect…
- Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure
- A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise Server, which allows attackers to steal sensitive user informatio…
- GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API
- Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers
- Cross Site Request Forgery was identified in GitHub Enterprise Server that allowed write in a user owned repository
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.