GitHub

Records179All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical24CVSS 9.0–10.0

CVSS high80CVSS 7.0–8.9

Exploited now

GitHub records in CISA KEV

No GitHub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enterprise Server 126 records HIGH Cmark-gfm 10 records HIGH Github 9 records MEDIUM Cli 3 records MEDIUM 491-project 1 record MEDIUM Actions/artifact 1 record MEDIUM Actions Toolkit 1 record MEDIUM Codeql Action 1 record LOW

Records

1 record in Codeql Action · all components

TI-2021-12306 CVE-2021-32638

CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated

LOW 21

Github's CodeQL action is provided to run CodeQL-based code scanning on non-GitHub CI/CD systems and requires a GitHub access token to connect to a GitHub repository.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.004 Published 2021-05-25 No fix listed CWE-200

Open these records in search →

Critical	24
High	80
Medium	72
Low	3
No CVSS	0