Github Enterprise Server vulnerabilities
126 published vulnerabilities in Github Enterprise Server. The most were published in 2024 (40), and 32 so far in 2026.
Github Enterprise Server vulnerabilities by year
2021
2022
2023
2024
2025
2026
Most exploited Github Enterprise Server vulnerabilities
- CVE-2024-4985 Auth bypass in Enterprise Server
- CVE-2022-23739 Missing authorization in GitHub Enterprise Server
- CVE-2022-46255 Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE
- CVE-2021-22869 Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group
- CVE-2024-9487 Auth bypass in Enterprise Server
- CVE-2024-6800 Auth bypass in GitHub Enterprise Server
- CVE-2026-77987 GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery
- CVE-2026-9312 Server-side request forgery in Enterprise Server
- CVE-2024-2443 Command injection in GitHub Enterprise Server
- CVE-2024-1355 Command injection in Enterprise Server
- CVE-2024-1359 Command injection in Enterprise Server
- CVE-2024-1369 Command injection in Enterprise Server
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.