Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes

Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed reading private repository metadata via delegated bypass rule suites

GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

Improper authorization allows persistent access in GitHub Enterprise Server

Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint

An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access to an upstream repository…

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff

An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating…

An incorrect authorization vulnerability in GitHub Enterprise Server allows issue creation in unrelated public repositories

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site

Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API

Incorrect Authorization in GitHub Enterprise Server allows access to issue and commit search results without repo scope

Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access

Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized read-only access

GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API

Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names

An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user…

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public…

A Cross Site Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed an attacker to execute unauthorized actions on behalf of an unsuspecting user

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperly scoped token. This vulnerability…

An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a…

A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred

Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access

Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers

An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository…