GHSA-8854-J33C-JPCF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GM7F-X5CX-P924 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-GPXF-958M-6MQP vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6FRP-279Q-XV29 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-739C-763R-27P8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-74QQ-X56M-PF89 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7Q95-H4CM-34V8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F9XC-4VWC-V58G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G6W4-JMQ8-GXGF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-5362-J574-JWGR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-557M-FHM3-G2JC vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-569F-G5J2-M5R8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-G2WC-G6R3-6429 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2WQV-R9PG-89QM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3WGM-HXJC-V3W2 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2PP4-FGGF-Q8FX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2QF8-W85F-8MMV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3GJJ-5F84-J9Q6 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17556

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS objects, release assets, attachments, and avatars. The...

CVE-2026-15996 Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parameters

A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause excessive CPU consumption and exhaust the pool of request-handling worker processes by sending a crafted form-encoded HTTP POST request containing deeply nested parameter...