Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: GitHub Enterprise Server 3.17.*, 3.18.* and 4 more versions Clear all filters
TI-2026-54240 CVE-2026-77912 · GHSA-6293-4rx2-2p57

Cross-site scripting in GitHub Enterprise Server

Priority LOW 34

A stored cross-site scripting (XSS) vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to inject arbitrary HTML attributes into rendered Markdown because the Markdown renderin…

CVSS 4.0HIGH 7.4 Network Low privileges User interaction EPSS 0.00207 Published 2026-09-22 No fix listed CWE-79