34888 matches found
CVE-2026-76851 Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services
A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...
CVE-2026-19118 Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...
CVE-2026-19118 Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...
CVE-2026-19118
A time-of-check time-of-use (TOCTOU) race condition in GitHub Enterprise Server enabled remote code execution . Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests . All versions prior to 3.22 were affected; fixes are avai...
CVE-2026-18730
This is a server-side request forgery (SSRF) vulnerability in GitHub Enterprise Server affecting the Manage API . An unauthenticated endpoint parsed an attacker-supplied cluster configuration and issued gateway-to-agent requests whose HMAC authenticated only a timestamp , not the request path or ...
CVE-2026-18730 Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token
A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...
CVE-2026-18730 Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer token
A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...
CVE-2026-84371
creationtimestamp| type| source ---|---|--- 2026-09-01 21:35:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/brv6imqhpe426 2026-09-01 22:35:05+00:00| published-proof-of-concept| https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-g8qq-57p8-ggw5 2026-09-02...
GHSA-M4RF-3FR8-XWX3
creationtimestamp| type| source ---|---|--- 2026-09-01 21:31:43+00:00| seen| https://gist.github.com/alon710/d77c44365a5d967f73ae86db10f23480...
CVE-2026-12841
creationtimestamp| type| source ---|---|--- 2026-09-01 21:31:43+00:00| seen| https://gist.github.com/alon710/d77c44365a5d967f73ae86db10f23480...
CVE-2026-68947
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:21+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-jqh4-m9w3-8hp9...
CVE-2026-68946
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:19+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-f4gw-2p7v-4548...
CVE-2026-69123
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:14+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-7q8q-rj6j-mhjq...
CVE-2026-69124
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:12+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9...
CVE-2026-58191
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:09+00:00| published-proof-of-concept| https://github.com/appium/appium/security/advisories/GHSA-3wgp-x9p5-c7cc 2026-09-14 21:00:06+00:00| confirmed|...
CVE-2026-73086
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:05+00:00| published-proof-of-concept| https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w 2026-09-05 00:14:08+00:00| seen| https://gist.github.com/djlan/55a70e34ef3841f55902bda07048c6a5...
CVE-2026-73229
creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:03+00:00| published-proof-of-concept| https://github.com/encode/django-rest-framework/security/advisories/GHSA-g47c-3xmw-q6m2...
GHSA-2M8G-3CMR-WG3W
creationtimestamp| type| source ---|---|--- 2026-09-01 20:33:07+00:00| seen| https://gist.github.com/alon710/25c48d25038e76519874ccf73ad1c753...