GitHub GitHub Enterprise Server vulnerabilities

CVEs per yearBy the year they were published

1. 20203
2. 202111
3. 202211
4. 20234
5. 202415
6. 20252

Newest CVEs

• CVE-2025-6600

  GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API

  GitHub · GitHub Enterprise Server

  Medium6.3
• CVE-2025-3246

  Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggers

  GitHub · GitHub Enterprise Server

  High8.6
• CVE-2024-9539

  An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata…

  GitHub · GitHub Enterprise Server

  Medium5.7
• CVE-2024-8263

  An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags. This…

  GitHub · GitHub Enterprise Server

  Medium6.2
• CVE-2024-8770

  A Cross-Site Scripting (XSS) vulnerability was identified in the repository transfer feature of GitHub Enterprise Server, which allows attackers to steal…

  GitHub · GitHub Enterprise Server

  Medium5.8
• CVE-2024-6800

  An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers…

  GitHub · GitHub Enterprise Server

  Critical9.5
• CVE-2024-6337

  Incorrect Authorization allows read access to issues in GitHub Enterprise Server

  GitHub · GitHub Enterprise Server

  Medium5.9
• CVE-2024-7711

  An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any…

  GitHub · GitHub Enterprise Server

  Medium5.3
• CVE-2024-6395

  GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

  GitHub · GitHub Enterprise Server

  Medium6.3
• CVE-2024-6336

  Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

  GitHub · GitHub Enterprise Server

  Medium6.9