github Vulnerability Advisory Catalog

Total 151 security vulnerabilities recorded for github software and firmware.

← Back to All Vendors
Component: enterprise_server

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re...

📅 2023-08-30
CVSS 4.8 Dossier →
Component: enterprise_server

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff within ...

📅 2023-07-27
CVSS 4.8 Dossier →
Component: cmark-gfm

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynom...

📅 2023-07-13
CVSS 6.4 Dossier →
Component: pull_requests_and_issues

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability...

📅 2023-07-11
CVSS 7.8 Dossier →
Component: enterprise_server

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do ...

📅 2023-04-07
CVSS 6.5 Dossier →
Component: enterprise_server

An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret g...

📅 2023-04-07
CVSS 7.7 Dossier →
Component: cmark-gfm

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may ...

📅 2023-03-31
CVSS 5.3 Dossier →
Component: cmark-gfm

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may ...

📅 2023-03-31
CVSS 5.3 Dossier →
Component: enterprise_server

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exp...

📅 2023-03-08
CVSS 4.9 Dossier →
Component: enterprise_server

An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions r...

📅 2023-03-07
CVSS 4.3 Dossier →
Component: enterprise_server

A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single environme...

📅 2023-03-02
CVSS 4.1 Dossier →
Component: enterprise_server

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To ex...

📅 2023-02-16
CVSS 6.5 Dossier →
Component: cmark-gfm

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 contain a polynomial...

📅 2023-01-26
CVSS 3.5 Dossier →
Component: cmark-gfm

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. In versions prior 0.29.0.gfm.7, a crafted markdown d...

📅 2023-01-24
CVSS 5.3 Dossier →
Component: cmark-gfm

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to a poly...

📅 2023-01-23
CVSS 3.5 Dossier →
Component: cmark-gfm

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Versions prior to 0.29.0.gfm.7 are subject to severa...

📅 2023-01-23
CVSS 3.5 Dossier →
CVE-2022-23739 CRITICAL
Component: enterprise_server

An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileges in GraphQL API requests fro...

📅 2023-01-17
CVSS 9.8 Dossier →
Component: enterprise_server

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped token with read/write access to m...

📅 2023-01-09
CVSS 6.5 Dossier →
Component: 491-project

A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the c...

📅 2023-01-08
CVSS 5.5 Dossier →
Component: enterprise_server

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full adm...

📅 2022-12-14
CVSS 7.2 Dossier →
Component: enterprise_server

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exp...

📅 2022-12-14
CVSS 8.8 Dossier →
CVE-2022-46255 CRITICAL
Component: enterprise_server

An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise Server that enabled remote code execu...

📅 2022-12-14
CVSS 9.8 Dossier →
Component: enterprise_server

An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to create or del...

📅 2022-12-01
CVSS 6.5 Dossier →
Component: enterprise_server

CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote ...

📅 2022-11-23
CVSS 8.8 Dossier →
Page 5 of 7 (151 Total Records)