Known Vulnerabilities for products from Github
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Github".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124621 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-124582 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-124508 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-123870 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-123852 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123851 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123677 json | Not Provided | 2026-11-06 | 2026-11-06 | |
| CVE-2026-123371 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-123369 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-123368 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-103620 json | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with ... | Not Provided | 2026-10-06 | 2026-10-20 |
| CVE-2026-96890 json | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contr... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-77987 json | A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server. The not... | Not Provided | 2026-09-22 | 2026-10-02 |
| CVE-2026-77912 json | A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticated at... | Not Provided | 2026-09-22 | 2026-10-02 |
| CVE-2026-76851 json | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed remote code execut... | Not Provided | 2026-09-01 | 2026-09-08 |
| CVE-2026-75101 json | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed any authenticated user of the i... | Not Provided | 2026-09-22 | 2026-10-02 |
| CVE-2026-48501 json | GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization head... | Not Provided | 2026-05-29 | 2026-07-21 |
| CVE-2026-47427 json | GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go ac... | Not Provided | 2026-07-28 | 2026-10-24 |
| CVE-2026-45803 json | `gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in G... | Not Provided | 2026-05-15 | 2026-05-21 |
| CVE-2026-45033 json | GitHub Copilot CLI brings AI-powered coding assistance directly to your command line. Prior to 1.0.43, a security vulnerabil... | Not Provided | 2026-05-13 | 2026-10-26 |