CVE-2025-13744 Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML

[
  {
    "defaultStatus": "affected",
    "product": "Enterprise Server",
    "vendor": "GitHub",
    "versions": [
      {
        "changes": [
          {
            "at": "3.14.20",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.14.19",
        "status": "affected",
        "version": "3.14.0",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "3.15.15",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.15.14",
        "status": "affected",
        "version": "3.15.0",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "3.16.11",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.16.10",
        "status": "affected",
        "version": "3.16.0",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "3.17.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.17.7",
        "status": "affected",
        "version": "3.17.0",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "3.18.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.18.1",
        "status": "affected",
        "version": "3.18.0",
        "versionType": "semver"
      },
      {
        "changes": [
          {
            "at": "3.19.1",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.19.0",
        "status": "affected",
        "version": "3.19",
        "versionType": "semver"
      }
    ]
  }
]