Product by GitHub
GitHub Enterprise Server
132 known vulnerabilities in GitHub Enterprise Server (GitHub), 0 of them actively exploited (CISA KEV).
Key figures
132
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
22
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-3854 | Remote code execution via git push option injection in GitHub Enterprise Server | 8.8 | |
| Critical | CVE-2026-9312 | GitHub Enterprise Server: Server-Side Request Forgery (SSRF) | 8.2 | |
| Critical | CVE-2024-9487 | GitHub Enterprise Server: Improper Verification of Cryptographic Signature | 9.1 | |
| Critical | CVE-2024-0200 | Unsafe Reflection in Github Enterprise Server leading to Command Injection | 7.2 | |
| High | CVE-2024-0507 | Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server | 6.5 | |
| Critical | CVE-2024-4985 | GitHub Enterprise Server: Incorrect Implementation of Authentication Algorithm | 9.8 | |
| Critical | CVE-2024-1374 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2024-1355 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2024-1378 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2024-1372 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2024-1369 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| Critical | CVE-2024-1359 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| High | CVE-2022-23734 | GitHub Enterprise Server: Deserialization of Untrusted Data | 8.8 | |
| Critical | CVE-2026-77987 | GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery | 9.8 | |
| Critical | CVE-2024-2443 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| High | CVE-2021-22864 | GitHub Enterprise Server: Command Injection | 8.8 | |
| High | CVE-2026-15343 | GitHub Enterprise Server: Path Traversal | — | |
| Critical | CVE-2024-6800 | GitHub Enterprise Server: Improper Verification of Cryptographic Signature | 9.8 | |
| High | CVE-2022-46256 | Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages | 8.8 | |
| High | CVE-2021-41599 | Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution | 8.8 | |
| High | CVE-2025-23369 | GitHub Enterprise Server: Improper Verification of Cryptographic Signature | 8.8 | |
| Critical | CVE-2022-46255 | GitHub Enterprise Server: Path Traversal | 9.8 | |
| High | CVE-2026-76851 | GitHub Enterprise Server: Server-Side Request Forgery (SSRF) | 8.8 | |
| High | CVE-2024-3646 | GitHub Enterprise Server: Improper Input Validation | 8.0 | |
| Critical | CVE-2026-17556 | GitHub Enterprise Server: Path Traversal | 9.1 |