Github vulnerabilities
165 CVEs and advisories name Github as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-37700Clipboard-based DOM-XSS
- CVE-2021-22867Unsafe configuration options in GitHub Pages leading to path traversal on GitHub Enterprise Server
- CVE-2021-32638CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated
- CVE-2021-22866UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources
- CVE-2021-22865Improper access control in GitHub Enterprise Server leading to unauthorized read access to private repository metadata
- CVE-2021-22864Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- CVE-2021-22863Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests
- CVE-2021-22862Improper access control in GitHub Enterprise Server leading to the disclosure of Actions secrets to forks
- CVE-2021-22861Improper access control in GitHub Enterprise Server leading to unauthorized write access to forkable repositories
- CVE-2020-10519Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- CVE-2020-10517Improper access control in GitHub Enterprise Server leading to the enumeration of private repository names
- CVE-2020-10518Unsafe configuration options in GitHub Pages leading to remote code execution on GitHub Enterprise Server
- CVE-2020-5238Denial of service in table parsing in cmark-gfm
- CVE-2020-10516Improper access control in GitHub Enterprise Server leading to privilege escalation of organization member
- CVE-2019-16765If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension act