# Github Enterprise Server


- [CVE-2024-4985](https://insights.sbomify.com/CVE-2024-4985/): Auth bypass in Enterprise Server (critical 10.0)
- [CVE-2022-23739](https://insights.sbomify.com/CVE-2022-23739/): Missing authorization in GitHub Enterprise Server (critical 9.8)
- [CVE-2022-46255](https://insights.sbomify.com/CVE-2022-46255/): Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE (critical 9.8)
- [CVE-2021-22869](https://insights.sbomify.com/CVE-2021-22869/): Improper access control in GitHub Enterprise Server allows self-hosted runners to execute outside their control group (critical 9.8)
- [CVE-2024-9487](https://insights.sbomify.com/CVE-2024-9487/): Auth bypass in Enterprise Server (critical 9.5)
- [CVE-2024-6800](https://insights.sbomify.com/CVE-2024-6800/): Auth bypass in GitHub Enterprise Server (critical 9.5)
- [CVE-2026-77987](https://insights.sbomify.com/CVE-2026-77987/): GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery (critical 9.3)
- [CVE-2026-9312](https://insights.sbomify.com/CVE-2026-9312/): Server-side request forgery in Enterprise Server (critical 9.2)
- [CVE-2024-2443](https://insights.sbomify.com/CVE-2024-2443/): Command injection in GitHub Enterprise Server (critical 9.1)
- [CVE-2024-1355](https://insights.sbomify.com/CVE-2024-1355/): Command injection in Enterprise Server (critical 9.1)
- [CVE-2024-1359](https://insights.sbomify.com/CVE-2024-1359/): Command injection in Enterprise Server (critical 9.1)
- [CVE-2024-1369](https://insights.sbomify.com/CVE-2024-1369/): Command injection in Enterprise Server (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/github/enterprise-server/