Github vulnerabilities
165 CVEs and advisories name Github as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-24824Quadratic complexity may lead to a denial of service in cmark-gfm
- CVE-2023-26485Quadratic complexity may lead to a denial of service in cmark-gfm
- CVE-2023-23760Path traversal in GitHub Enterprise Server leading to remote code execution
- CVE-2022-46257Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names
- CVE-2023-22381Code injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actions
- CVE-2023-22380Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site
- CVE-2023-22486cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service
- CVE-2023-22485cmark-gfm out-of-bounds read in validate_protocol
- CVE-2023-22484Inefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service
- CVE-2023-22483cmark-gfm Quadratic complexity bugs may lead to a denial of service
- CVE-2022-23739Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokens
- CVE-2022-46258Incorrect Authorization in GitHub Enterprise Server leads to Action Workflow modifications without Workflow Scope
- CVE-2022-46256Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages
- CVE-2022-46255Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE
- CVE-2022-23741Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access
- CVE-2022-23737Improper Privilege Management in GitHub Enterprise Server leading to page creation and deletion
- CVE-2022-23740Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution
- CVE-2022-23738Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files
- CVE-2022-23734Deserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution
- CVE-2022-39209Uncontrolled Resource Consumption in cmark-gfm
- CVE-2022-23733Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes
- CVE-2022-31026Use of Uninitialized Variable in trilogy
- CVE-2022-23732Path traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections
- CVE-2022-24724Integer overflow in table parsing extension leads to heap memory corruption
- CVE-2022-24722Cross-site Scripting in view_component
- CVE-2021-41599Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution
- CVE-2021-41598UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user
- CVE-2021-22870Path traversal in GitHub Enterprise Server hosted Pages leads to unauthorized file read access
- CVE-2021-22868Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- CVE-2021-22869Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group