agentprime: github-enterprise-serverEvery new CVE for github-enterprise-server.https://agentprime.io/CVE-2026-118237: Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git servicehttps://agentprime.io/advisories/CVE-2026-118237/https://agentprime.io/advisories/CVE-2026-118237/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:51:42 GMTCVECVE-2026-110288: Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the Management Consolehttps://agentprime.io/advisories/CVE-2026-110288/https://agentprime.io/advisories/CVE-2026-110288/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:50:39 GMTCVECVE-2026-104608: Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git servicehttps://agentprime.io/advisories/CVE-2026-104608/https://agentprime.io/advisories/CVE-2026-104608/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:49:48 GMTCVECVE-2026-96890: Server-Side Request Forgery vulnerability was identified in GitHub Enterprise Server that allowed requests to attacker-controlled internal hostshttps://agentprime.io/advisories/CVE-2026-96890/https://agentprime.io/advisories/CVE-2026-96890/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:56:46 GMTCVECVE-2026-103620: Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQLhttps://agentprime.io/advisories/CVE-2026-103620/https://agentprime.io/advisories/CVE-2026-103620/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 18:56:41 GMTCVECVE-2026-75101: Authorization bypass vulnerability in GitHub Enterprise Server allowed reading of private pull request diffs and patches via repository name collisionhttps://agentprime.io/advisories/CVE-2026-75101/https://agentprime.io/advisories/CVE-2026-75101/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:43:59 GMTCVECVE-2026-77912: Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipelinehttps://agentprime.io/advisories/CVE-2026-77912/https://agentprime.io/advisories/CVE-2026-77912/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:43:56 GMTCVECVE-2026-77987: GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-77987/https://agentprime.io/advisories/CVE-2026-77987/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:43:53 GMTCVEcriticalCVE-2026-76851: Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal serviceshttps://agentprime.io/advisories/CVE-2026-76851/https://agentprime.io/advisories/CVE-2026-76851/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 21:55:10 GMTCVECVE-2026-19118: Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code executionhttps://agentprime.io/advisories/CVE-2026-19118/https://agentprime.io/advisories/CVE-2026-19118/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 21:55:04 GMTCVECVE-2026-18730: Server-side request forgery vulnerability in GitHub Enterprise Server Manage API leaked a replayable gateway-agent bearer tokenhttps://agentprime.io/advisories/CVE-2026-18730/https://agentprime.io/advisories/CVE-2026-18730/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 21:54:58 GMTCVECVE-2026-15996: Denial of service vulnerability in GitHub Enterprise Server allowed unauthenticated service disruption via deeply nested request parametershttps://agentprime.io/advisories/CVE-2026-15996/https://agentprime.io/advisories/CVE-2026-15996/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 20:12:57 GMTCVECVE-2026-17556: Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id headerhttps://agentprime.io/advisories/CVE-2026-17556/https://agentprime.io/advisories/CVE-2026-17556/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 20:05:53 GMTCVECVE-2026-15783: Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed reading private repository metadata via delegated bypass rule suiteshttps://agentprime.io/advisories/CVE-2026-15783/https://agentprime.io/advisories/CVE-2026-15783/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 15:20:23 GMTCVECVE-2026-15343: Path traversal vulnerability in GitHub Enterprise Server allowed writing files to arbitrary repository paths, including GitHub Actions workflow files, via unchecked Dependabot dependency-file pathshttps://agentprime.io/advisories/CVE-2026-15343/https://agentprime.io/advisories/CVE-2026-15343/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 15:18:46 GMTCVECVE-2026-15007: Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via deeply nested YAML in release notes configurationhttps://agentprime.io/advisories/CVE-2026-15007/https://agentprime.io/advisories/CVE-2026-15007/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 15:16:02 GMTCVECVE-2026-14340: An incorrect authorization vulnerability in GitHub Enterprise Server allows issue creation in unrelated public repositorieshttps://agentprime.io/advisories/CVE-2026-14340/https://agentprime.io/advisories/CVE-2026-14340/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 21:03:00 GMTCVECVE-2026-10585: Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed arbitrary JavaScript execution via crafted Discussion titles in the Q&A categoryhttps://agentprime.io/advisories/CVE-2026-10585/https://agentprime.io/advisories/CVE-2026-10585/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 21:39:02 GMTCVECVE-2026-9132: Missing authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository contents via the Copilot pull request diff summary endpointhttps://agentprime.io/advisories/CVE-2026-9132/https://agentprime.io/advisories/CVE-2026-9132/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 20:23:37 GMTCVECVE-2026-9106: UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management via undisclosed OAuth scope on consent screenhttps://agentprime.io/advisories/CVE-2026-9106/https://agentprime.io/advisories/CVE-2026-9106/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 20:21:12 GMTCVECVE-2026-9312: Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpointhttps://agentprime.io/advisories/CVE-2026-9312/https://agentprime.io/advisories/CVE-2026-9312/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 00:02:32 GMTCVEcriticalCVE-2026-8606: Server-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL Endpointhttps://agentprime.io/advisories/CVE-2026-8606/https://agentprime.io/advisories/CVE-2026-8606/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 23:59:41 GMTCVECVE-2026-8106: Reflected HTML injection vulnerability in GitHub Enterprise Server Management Console login page allowed credential thefthttps://agentprime.io/advisories/CVE-2026-8106/https://agentprime.io/advisories/CVE-2026-8106/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 21:18:59 GMTCVECVE-2026-8034: Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusionhttps://agentprime.io/advisories/CVE-2026-8034/https://agentprime.io/advisories/CVE-2026-8034/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 21:18:49 GMTCVECVE-2026-7541: Denial of service vulnerability in GitHub Enterprise Server allowed service disruption via unauthenticated API endpointhttps://agentprime.io/advisories/CVE-2026-7541/https://agentprime.io/advisories/CVE-2026-7541/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 21:18:35 GMTCVECVE-2026-6736: Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity providerhttps://agentprime.io/advisories/CVE-2026-6736/https://agentprime.io/advisories/CVE-2026-6736/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 21:14:33 GMTCVECVE-2026-5845: Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Serverhttps://agentprime.io/advisories/CVE-2026-5845/https://agentprime.io/advisories/CVE-2026-5845/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 22:42:13 GMTCVECVE-2026-3307: Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewershttps://agentprime.io/advisories/CVE-2026-3307/https://agentprime.io/advisories/CVE-2026-3307/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 22:23:25 GMTCVECVE-2026-5512: Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy APIhttps://agentprime.io/advisories/CVE-2026-5512/https://agentprime.io/advisories/CVE-2026-5512/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 22:12:58 GMTCVECVE-2026-4296: Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypasshttps://agentprime.io/advisories/CVE-2026-4296/https://agentprime.io/advisories/CVE-2026-4296/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 22:12:45 GMTCVECVE-2026-5921: Server-Side Request Forgery in GitHub Enterprise Server allowed extraction of sensitive environment variables via timing side-channel attackhttps://agentprime.io/advisories/CVE-2026-5921/https://agentprime.io/advisories/CVE-2026-5921/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 22:11:02 GMTCVECVE-2026-3582: Incorrect Authorization in GitHub Enterprise Server allows access to issue and commit search results without repo scopehttps://agentprime.io/advisories/CVE-2026-3582/https://agentprime.io/advisories/CVE-2026-3582/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 18:56:56 GMTCVECVE-2026-2266: Improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting via task list content and enabled arbitrary HTML injectionhttps://agentprime.io/advisories/CVE-2026-2266/https://agentprime.io/advisories/CVE-2026-2266/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 18:55:38 GMTCVECVE-2026-3306: Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write accesshttps://agentprime.io/advisories/CVE-2026-3306/https://agentprime.io/advisories/CVE-2026-3306/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 17:46:57 GMTCVECVE-2026-3854: Remote code execution via git push option injection in GitHub Enterprise Serverhttps://agentprime.io/advisories/CVE-2026-3854/https://agentprime.io/advisories/CVE-2026-3854/CVSS 8.7 (High). Critical: CVSS score 8.7 (7.0 or more) and EPSS 0.42 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 17:37:34 GMTCVEcriticalCVE-2026-1999: Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized merging of pull requestshttps://agentprime.io/advisories/CVE-2026-1999/https://agentprime.io/advisories/CVE-2026-1999/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 20:44:51 GMTCVECVE-2026-1355: Missing Authorization Check in GitHub Enterprise Server Allows Unauthorized Uploads to Repository Migration Exportshttps://agentprime.io/advisories/CVE-2026-1355/https://agentprime.io/advisories/CVE-2026-1355/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 20:42:07 GMTCVECVE-2026-0573: Improper Handling of HTTP Redirects vulnerability was identified in GitHub Enterprise Server that allowed leaking of authorization token and enabled remote code executionhttps://agentprime.io/advisories/CVE-2026-0573/https://agentprime.io/advisories/CVE-2026-0573/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 20:37:39 GMTCVECVE-2025-13744: Improper Neutralization of Input During Web Page Generation vulnerability was identified in GitHub Enterprise Server that allowed rendering of malicious HTMLhttps://agentprime.io/advisories/CVE-2025-13744/https://agentprime.io/advisories/CVE-2025-13744/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Jan 2026 20:44:02 GMTCVECVE-2025-14046: Insufficient HTML Sanitization Allows User-Controlled DOM Elements to Overwrite Server-Initialized Data Islands and Trigger Unintended Server-Side POST Requestshttps://agentprime.io/advisories/CVE-2025-14046/https://agentprime.io/advisories/CVE-2025-14046/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Dec 2025 17:52:05 GMTCVECVE-2025-11578: Pre-Receive Hook Path Collision Vulnerability in GitHub Enterprise Server Allowing Privilege Escalationhttps://agentprime.io/advisories/CVE-2025-11578/https://agentprime.io/advisories/CVE-2025-11578/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 22:44:33 GMTCVECVE-2025-11892: DOM-based Cross-Site Scripting was identified in GitHub Enterprise Server Issues search allows privilege escalation and unauthorized workflow triggershttps://agentprime.io/advisories/CVE-2025-11892/https://agentprime.io/advisories/CVE-2025-11892/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 22:43:41 GMTCVECVE-2025-8447: Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed read-only accesshttps://agentprime.io/advisories/CVE-2025-8447/https://agentprime.io/advisories/CVE-2025-8447/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Aug 2025 01:42:37 GMTCVECVE-2025-6981: Incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized read-only accesshttps://agentprime.io/advisories/CVE-2025-6981/https://agentprime.io/advisories/CVE-2025-6981/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Jul 2025 20:44:30 GMTCVECVE-2025-6600: GitHub Enterprise Server Information Disclosure Vulnerability Exposes Private Repository Names via Search APIhttps://agentprime.io/advisories/CVE-2025-6600/https://agentprime.io/advisories/CVE-2025-6600/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Jul 2025 18:56:45 GMTCVECVE-2025-3246: Markdown math block sanitization bypass allows privilege escalation and unauthorized workflow triggershttps://agentprime.io/advisories/CVE-2025-3246/https://agentprime.io/advisories/CVE-2025-3246/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Apr 2025 22:50:22 GMTCVECVE-2025-3509: Pre-Receive Hook Remote Code Execution vulnerability was identified in GitHub Enterprise Server that allowing Privilege Escalationhttps://agentprime.io/advisories/CVE-2025-3509/https://agentprime.io/advisories/CVE-2025-3509/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Apr 2025 22:50:18 GMTCVECVE-2025-3124: Missing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository nameshttps://agentprime.io/advisories/CVE-2025-3124/https://agentprime.io/advisories/CVE-2025-3124/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Apr 2025 22:50:14 GMTCVECVE-2024-10001: Code Injection Vulnerability in GitHub Enterprise Server Allows Arbitrary Code Execution via Message Handlinghttps://agentprime.io/advisories/CVE-2024-10001/https://agentprime.io/advisories/CVE-2024-10001/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Jan 2025 18:24:58 GMTCVECVE-2025-23369: Improper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper Validationhttps://agentprime.io/advisories/CVE-2025-23369/https://agentprime.io/advisories/CVE-2025-23369/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jan 2025 18:46:30 GMTCVE