Skip to content
OpenAdvisories

Vendor

GitHub

165 known vulnerabilities.

Products

Enterprise Server 93 GitHub Enterprise Server 46 cmark-gfm 10 OpenSearch 3 codeql-action 2 github-mcp-server 2 copilot-cli 2 view_component 1 trilogy 1 Webiness Inventory 1 secure_headers 1 paste-markdown 1 vscode-codeql 1 codeql-cli-binaries 1 cli 0
All Critical High Medium Low Exploited only Public exploit

165 results · Feed

  • Unscored —
    CVE-2020-10517

    Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names

    An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauth…

    GitHub GitHub Enterprise Server
  • Unscored —
    CVE-2020-10518

    Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server

    A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made …

    GitHub GitHub Enterprise Server
  • Medium 6.5
    CVE-2020-5238

    Denial of service in table parsing in cmark-gfm

    The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue do…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • Unscored —
    CVE-2020-10516

    Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member

    An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versio…

    GitHub GitHub Enterprise Server
  • High 7.4
    CVE-2019-16765

    If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the…

    GitHub vscode-codeql