Product by GitHub
Github Enterprise Server
66 known vulnerabilities in Github Enterprise Server (GitHub), 0 of them actively exploited (CISA KEV).
Key figures
66
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-9312 | GitHub Enterprise Server: Server-Side Request Forgery (SSRF) | 8.2 | |
| High | CVE-2020-10518 | GitHub Enterprise Server: Command Injection | 8.8 | |
| High | CVE-2020-10519 | GitHub Enterprise Server: Command Injection | 8.8 | |
| High | CVE-2022-23734 | GitHub Enterprise Server: Deserialization of Untrusted Data | 8.8 | |
| Critical | CVE-2026-77987 | GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery | 9.8 | |
| Critical | CVE-2024-2443 | GitHub Enterprise Server: Improper Input Validation | 9.1 | |
| High | CVE-2021-22864 | GitHub Enterprise Server: Command Injection | 8.8 | |
| High | CVE-2026-15343 | GitHub Enterprise Server: Path Traversal | — | |
| Critical | CVE-2024-6800 | GitHub Enterprise Server: Improper Verification of Cryptographic Signature | 9.8 | |
| High | CVE-2022-46256 | Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages | 8.8 | |
| High | CVE-2021-41599 | Improper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution | 8.8 | |
| Critical | CVE-2022-46255 | GitHub Enterprise Server: Path Traversal | 9.8 | |
| Critical | CVE-2020-10516 | GitHub Enterprise Server: Improper Authorization | 9.8 | |
| High | CVE-2026-76851 | GitHub Enterprise Server: Server-Side Request Forgery (SSRF) | 8.8 | |
| Critical | CVE-2026-17556 | GitHub Enterprise Server: Path Traversal | 9.1 | |
| High | CVE-2022-23732 | GitHub Enterprise Server: Relative Path Traversal | 8.8 | |
| High | CVE-2026-19118 | GitHub Enterprise Server: Time-of-check Time-of-use (TOCTOU) Race Condition | 7.5 | |
| Critical | CVE-2022-23739 | GitHub Enterprise Server: Incorrect Authorization | 9.8 | |
| High | CVE-2026-96890 | GitHub Enterprise Server: Server-Side Request Forgery (SSRF) | 8.8 | |
| Critical | CVE-2021-22869 | GitHub Enterprise Server: Exposure of Resource to Wrong Sphere | 9.8 | |
| High | CVE-2022-23740 | GitHub Enterprise Server: Argument Injection | 8.8 | |
| High | CVE-2021-41598 | GitHub Enterprise Server: User Interface (UI) Misrepresentation of Critical Information | 8.8 | |
| High | CVE-2026-18730 | GitHub Enterprise Server: Server-Side Request Forgery (SSRF) | 7.4 | |
| High | CVE-2026-104608 | GitHub Enterprise Server: Use After Free | — | |
| Medium | CVE-2026-103620 | GitHub Enterprise Server: Missing Authorization | 6.5 |