github vulnerabilities
165 published CVEs name github among the affected products.
- Published CVEs
- 165
- Last 12 months
- 51
- Critical
- 16
- Known exploited
- 0
Critical 16High 66Medium 77Low 6Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20204
- 202113
- 202215
- 202332
- 202440
- 202512
- 202648
Newest CVEs
- CVE-2026-118237
Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service
GitHub · Enterprise Server
Medium5.3 - CVE-2026-110288
Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console
GitHub · Enterprise Server
Medium5.3 - CVE-2026-104608
Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service
GitHub · Enterprise Server
High7.7 - CVE-2026-96890
Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts
GitHub · Enterprise Server
High8.7 - CVE-2026-103620
Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL
GitHub · Enterprise Server
Medium6.0 - CVE-2026-75101
Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collision
GitHub · Enterprise Server
Medium6.0 - CVE-2026-77912
Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline
GitHub · Enterprise Server
High7.4 - CVE-2026-77987
GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
GitHub · Enterprise Server
Critical9.3 - CVE-2026-76851
Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services
GitHub · Enterprise Server
High7.7 - CVE-2026-19118
Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
GitHub · Enterprise Server
High7.7
Products with the most CVEs
Most common weaknesses
- CWE-77 Command injection15
- CWE-79 Cross-site scripting (XSS)14
- CWE-22 Path traversal13
- CWE-863 Incorrect authorization13
- CWE-20 Improper input validation12
- CWE-918 Server-side request forgery (SSRF)10
- CWE-200 Exposure of sensitive information8
- CWE-269 Improper privilege management8
- CWE-400 Uncontrolled resource consumption8
- CWE-862 Missing authorization8