Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes

Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed reading private repository metadata via delegated bypass rule suites

GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Deploy Keys

Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

Improper authorization allows persistent access in GitHub Enterprise Server

Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint

Information disclosure in GitHub Enterprise Server leading to private repository leakage

Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists

An incorrect authorization vulnerability in GitHub Enterprise Server allows issue creation in unrelated public repositories

Incorrect Authorization for Issue Comments in GitHub Enterprise Server

Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site

Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API

Incorrect Authorization in GitHub Enterprise Server allows access to issue and commit search results without repo scope

Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access

Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized read-only access

GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search API

Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository names

An information disclosure vulnerability was identified in GitHub Enterprise Server via attacker uploaded asset URL allowing the attacker to retrieve metadata information of a user…

An Incorrect Authorization vulnerability was identified in GitHub Enterprise Server, allowing an attacker to update the title, assignees, and labels of any issue inside a public…

CSRF vulnerability was identified in GitHub Enterprise Server that allowed performing actions on behalf of a user

Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository names

A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site

Race Condition allows Unauthorized Outside Collaborator

Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only access

Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers

An improper privilege management vulnerability allowed arbitrary workflows to be committed using an improperly scoped PAT through the use of nested tags

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository…