Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

github vulnerabilities

165 published CVEs name github among the affected products.

Published CVEs
165
Last 12 months
51
Critical
16
Known exploited
0

Critical 16High 66Medium 77Low 6Not scored 0

CVEs per yearBy the year they were published

  1. 20191
  2. 20204
  3. 202113
  4. 202215
  5. 202332
  6. 202440
  7. 202512
  8. 202648

Newest CVEs

  • CVE-2026-118237

    Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git service

    GitHub · Enterprise Server

    Medium5.3
  • CVE-2026-110288

    Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Console

    GitHub · Enterprise Server

    Medium5.3
  • CVE-2026-104608

    Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git service

    GitHub · Enterprise Server

    High7.7
  • CVE-2026-96890

    Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hosts

    GitHub · Enterprise Server

    High8.7
  • CVE-2026-103620

    Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL

    GitHub · Enterprise Server

    Medium6.0
  • CVE-2026-75101

    Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collision

    GitHub · Enterprise Server

    Medium6.0
  • CVE-2026-77912

    Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline

    GitHub · Enterprise Server

    High7.4
  • CVE-2026-77987

    GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery

    GitHub · Enterprise Server

    Critical9.3
  • CVE-2026-76851

    Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services

    GitHub · Enterprise Server

    High7.7
  • CVE-2026-19118

    Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution

    GitHub · Enterprise Server

    High7.7