[Git Gud] GitHub.com Svnbridge memcached deserialization vulnerability chain leading to Remote Code Execution #1593913 Valid Deserialization and Object Injection – 2022-11-16 – 14 Improper handling of null bytes in GitHub Actions Runner allows an attacker to set arbitrary environment variables #1762025 Valid Injection and Smuggling – 2023-03-09 – 19 Git Reference Ambiguity in GitHub - Commit Smuggling, Account Takeover, and Remote Code Execution #2017600 Valid Injection and Smuggling – 2023-11-29 – 25 [PATs] Token with Read-Only permissions on Issues able to modify issue comments using content write permission #2209433 Valid Access Control – 2024-01-03 – 31 Command injection in GitHub Actions ContainerStepHost #1637621 Valid Injection and Smuggling – 2022-11-03 $4,000 32 Sample report: Denial of service #3290630 Valid Information Disclosure None 2025-08-07 – 33 Smuggling content in PR with refs/replace in GitHub #1938106 Valid Injection and Smuggling – 2023-08-01 – 35 Delimiter injection in GitHub Actions core.exportVariable #1625652 Valid Misconfiguration and Insecure Design – 2022-08-18 $4,617 39 [PATs] Ability to leak comments from issues without ANY "Issues" repo permissions by utilizing "Pull Request" permissions #2184950 Valid Access Control – 2024-01-03 – 42 Rogue collaborators and ambiguous branch names in GitHub #1831528 Valid Input Validation and Logic – 2023-12-05 – 43 Add labels to arbitrary issues/prs via Memex Bulk Update to compromise github actions label gating #3527788 Valid Insecure Direct Object Reference Medium 2026-08-25 – 46 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in actions-console #2323292 Valid Command and Code Injection High 2024-09-17 – 47 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in collectd #2329547 Valid Command and Code Injection High 2024-09-17 – 47 RC Between GitHub's Repo Transfer REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention #2216036 Valid Misconfiguration and Insecure Design – 2024-01-12 – 50 RC Between GitHub's Repo Update REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention #2357443 Valid Misconfiguration and Insecure Design Medium 2024-09-17 – 50 Persistent Unauthorized Administrative Access on All Organization Repositories via RC in User Conversion to Organization #2185545 Valid Authentication – 2024-03-15 – 51 DoS via markdown API from unauthenticated user #1619604 Valid Denial of Service – 2022-12-13 $4,000 54 Managing Pages #1690427 Valid Access Control – 2022-12-22 – 54 GHES Management console EoP (editor to site admin) #2197796 Valid Access Control – 2024-01-08 – 56 Bypassing Collaborator Restrictions: Retaining Admin Access Post-Repository Transfer #2190827 Valid Access Control – 2024-03-15 – 57 PATs without the required scope can leak issues #3522254 Valid Access Control Medium 2026-03-19 – 59 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in syslog-ng #2329466 Valid Command and Code Injection High 2024-09-13 – 61 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection #2332551 Valid Command and Code Injection High 2024-09-13 – 61 GitHub user to server tokens can create issues in any public repository #3641229 Valid Access Control Medium 2026-07-22 – 62 Source Code and data exfiltration via Github Copilot #2383092 Valid Command and Code Injection Low 2024-08-19 – 63 View Repo and Title of Any Private Check Run #2210179 Valid Insecure Direct Object Reference – 2024-01-08 – 64 View private repository NWO of deploy key via internal LFS API #2469713 Valid Access Control Medium 2024-07-23 – 70 Privilege Escalation to Root SSH Access via Pre-Receive Hook Environment in GitHub Enterprise Server #2336236 Valid No weakness recorded High 2024-09-13 – 71 Add labels to arbitrary issues/prs & compromise github actions label checks #3527771 Valid Insecure Direct Object Reference Medium 2026-03-19 – 71 Information Leakage via Clicked Link in GitHub Repository (Fingerprinting) #2505761 Valid Information Disclosure Medium 2024-10-17 $4,000 72 Self XSS in Tag name pattern field /<username>/<reponame>/settings/tag_protection/new #2246576 Valid Cross-site Scripting – 2024-04-15 – 76 OAuth redirect uri validation bypass for :proxima_first_party_sync apps #3588801 Valid Open Redirect High 2026-07-21 – 79 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection and audit-forward #2332623 Valid Command and Code Injection High 2024-09-13 – 80 GitHub scoped user to server tokens can escape their installation #3638909 Valid Access Control High 2026-07-29 – 80 Invite tokens have Insufficient entropy in GHES Management Console #2197801 Valid Cryptography – 2024-01-12 – 81 Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-check #2325023 Valid Command and Code Injection High 2024-09-17 – 88 GitHub Apps can access suspended installations via scoped user-to-server tokens #2484635 Valid Access Control Medium 2024-07-31 – 90 Missing Access Control in MigrationFile allows attacker to upload files to any Migration #3506183 Valid Insecure Direct Object Reference High 2026-03-05 – 92 Github app Privilege Escalation to Administrator/Owner of the Organization #1732595 Valid Access Control – 2023-01-13 – 98 Access body and title of Internal Repo Issues in Projects #2501036 Valid Information Disclosure Medium 2024-07-31 – 100 Able to bypass authorization logic and gain more access then intended #3713965 Valid No weakness recorded Medium 2026-07-15 – 105 Cross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized delegated bypass reviewer modification #3560256 Valid Insecure Direct Object Reference Medium 2026-05-19 – 108 CSRF protection bypass in GitHub Enterprise management console #1497169 Valid Cross-Site Request Forgery – 2022-04-13 $10,000 152 Authentication bypass on gist.github.com through SSH Certificates #1901040 Valid Access Control – 2023-04-20 $10,000 182 SAML Signature verification bypass allows logging into any user (with specific conditions) #2579939 Valid Access Control Critical 2024-10-10 – 196 Github Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to User's Projects in Project V2 GraphQL api #1711938 Valid Access Control – 2023-01-26 – 198 Arbitrary Read of Another Users private repository without Authorization Analysed #3124517 Valid Insecure Direct Object Reference High 2025-09-23 $10,000 276