GHSA-45J3-MR6F-V6PC vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7Q95-H4CM-34V8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-739C-763R-27P8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5362-J574-JWGR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F9XC-4VWC-V58G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-569F-G5J2-M5R8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8854-J33C-JPCF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-74QQ-X56M-PF89 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-557M-FHM3-G2JC vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3WGM-HXJC-V3W2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2WQV-R9PG-89QM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3GJJ-5F84-J9Q6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2QF8-W85F-8MMV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2PP4-FGGF-Q8FX vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17556

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...

CVE-2026-15996

The CVE describes a denial-of-service flaw in GitHub Enterprise Server where unauthenticated attackers could trigger excessive CPU usage and exhaust request-handling worker processes by sending a crafted form-encoded HTTP POST containing deeply nested parameters. Because parameter parsing occurre...

CVE-2026-15996 Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parameters

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameter...

CVE-2026-17556

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...

CVE-2026-17556 Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...

CVE-2026-17556

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...