Skip to content
OpenAdvisories

Vendor

GitHub

165 known vulnerabilities.

Products

Enterprise Server 93 GitHub Enterprise Server 46 cmark-gfm 10 OpenSearch 3 codeql-action 2 github-mcp-server 2 copilot-cli 2 view_component 1 trilogy 1 Webiness Inventory 1 secure_headers 1 paste-markdown 1 vscode-codeql 1 codeql-cli-binaries 1 cli 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-3306 Public exploit

    Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access

    An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project to modify issue and pull request metadata through the project. When adding an item to a proje…

    GitHub Enterprise Server
  • Medium 6.5
    CVE-2024-0507 Public exploit EPSS 66%

    Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

    An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed…

    GitHub Enterprise Server