Skip to content
OpenAdvisories

Vendor

GitHub

165 known vulnerabilities.

Products

Enterprise Server 93 GitHub Enterprise Server 46 cmark-gfm 10 OpenSearch 3 codeql-action 2 github-mcp-server 2 copilot-cli 2 view_component 1 trilogy 1 Webiness Inventory 1 secure_headers 1 paste-markdown 1 vscode-codeql 1 codeql-cli-binaries 1
All Critical High Medium Low Exploited only

6 results · Clear filters · Feed

  • Low 2.7
    CVE-2024-25129

    Limited data exfiltration in CodeQL CLI

    The CodeQL CLI repo holds binaries for the CodeQL command line interface (CLI). Prior to version 2.16.3, an XML parser used by the CodeQL CLI to read various auxiliary files is vulnerable to an XML External Entity attack. If a vulnerable version of the CLI is…

    GitHub codeql-cli-binaries
  • Low 2.7
    CVE-2023-51380

    Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

    An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperly scoped token. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version…

    GitHub Enterprise Server
  • Low 3.9
    CVE-2023-6690

    A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositor…

    GitHub Enterprise Server
  • Low 3.5
    CVE-2023-22486

    cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial time complexity issue in handle_close_bracket that may lead to unbounded resource exhaustion and subsequent d…

    GitHub cmark-gfm ruby-commonmarker cmark-gfm Debian Ubuntu Alpine
  • Low 3.5
    CVE-2023-22484

    Inefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a polynomial time complexity issue in cmark-gfm that may lead to unbounded resource exhaustion and subsequent denia…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • Low 3.5
    CVE-2023-22483

    cmark-gfm Quadratic complexity bugs may lead to a denial of service

    cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to several polynomial time complexity issues in cmark-gfm that may lead to unbounded resource exhaustion and subsequen…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu