CVE-2025-61916

Spinnaker is an open source, multi-cloud continuous delivery platform. Versions prior to 2025.1.6, 2025.2.3, and 2025.3.0 are vulnerable to server-side request forgery. The primary impact is allowing users to fetch data from a remote URL. This data can be then injected into spinnaker pipelines vi...

CVE-2024-2469

An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.17, 3.9.12, 3.10.9, 3.11.7 and 3.12.1. This vulnerability was reported...

CVE-2024-2443

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring GeoJSON settings. Exploitation of this vulnerability required access to the GitHub...

GHSA-F46Q-GMG5-36HM vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-QPXX-2FWX-F5QJ vulnerabilities

Vulnerabilities for packages: pgbouncer...

GHSA-C6CM-5GC7-C3F4 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-3MGP-FX93-9XV5 vulnerabilities

Vulnerabilities for packages: grafana...

GHSA-64X6-Q8PQ-XJMG vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-G23H-7VF9-XC25 vulnerabilities

Vulnerabilities for packages: difftastic...

GHSA-F7VH-QWP3-X37M vulnerabilities

Vulnerabilities for packages: druid...

GHSA-QF7C-7R9H-MM92 vulnerabilities

Vulnerabilities for packages: elasticsearch-fips, sonarqube, ruby4.0-elasticsearch...

GHSA-RWVC-J5JR-MGVH vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-6HWG-W5JG-9C6X vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester, rancher-machine...

GHSA-8Q63-W3PX-VG38 vulnerabilities

Vulnerabilities for packages: ffmpeg...

PT-2026-1633

Name of the Vulnerable Software and Affected Versions Easy GitHub Gist Shortcodes plugin for WordPress versions prior to 1.0 Description The Easy GitHub Gist Shortcodes plugin for WordPress is susceptible to Stored Cross-Site Scripting through the id parameter of the gist shortcode. Insufficient...

WordPress Easy GitHub Gist Shortcodes plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Easy GitHub Gist Shortcodes versions = 1.0...

CVE-2025-13744

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

CVE-2025-13744

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

CVE-2025-13744 Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...

CVE-2025-13744 Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTML

An Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed attacker controlled HTML to be rendered by the Filter component search across GitHub that could be used to exfiltrate sensitive information. An attacker would requi...