GitHub

An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions feature.

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection.

An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console.

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark.

GitHub MCP Server is GitHub's official MCP Server.

GitHub Copilot CLI brings AI-powered coding assistance directly to your command line.

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the order parameter.

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance.

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec.

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access…

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C.

The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code.

GitHub MCP Server is GitHub's official MCP Server.

secure_headers manages application of security headers with many safe defaults.

A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to send crafted requests to internal services by exploiting insufficient input valida…

An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed signed federation metadata XML.

A server-side request forgery (SSRF) vulnerability was identified in the notebook viewer of GitHub Enterprise Server.

`gh` is GitHub’s official command line tool.

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site.

GitHub Actions Runner is the application that runs a job from a GitHub Actions workflow.