GitHub security advisories

35 advisories across github-mcp-server, copilot-cli, GitHub

Date	Advisory	Product	Severity	Fixed in
Sep 23	gh-aw: HTTPS egress allowlist bypass via TLS SNI domain fronting GitHubHigh8.3Sep 23 GHSA-x78f-wrrj-4h24GitHub0.89.17	GitHub	High8.3	0.89.17
Sep 22	GitHub Enterprise Server: cross-site scripting Enterprise ServerHigh7.4Sep 22 CVE-2026-77912Enterprise Server3.17.*+3 more	Enterprise Server	High7.4	3.17.*+3 more
Sep 22	GitHub Enterprise Server: server-side request forgery Enterprise ServerCritical9.3Sep 22 CVE-2026-77987Enterprise Server3.17.*+3 more	Enterprise Server	Critical9.3	3.17.*+3 more
Sep 22	GitHub Enterprise Server: insecure direct object reference Enterprise ServerMedium6.0Sep 22 CVE-2026-75101Enterprise Server3.17.*+3 more	Enterprise Server	Medium6.0	3.17.*+3 more
Sep 1	GitHub Enterprise Server: server-side request forgery Enterprise ServerHigh7.7Sep 1 CVE-2026-76851Enterprise ServerNo fix yet	Enterprise Server	High7.7	No fix yet
Sep 1	GitHub Enterprise Server: race condition Enterprise ServerHigh7.7Sep 1 CVE-2026-19118Enterprise ServerNo fix yet	Enterprise Server	High7.7	No fix yet
Sep 1	GitHub Enterprise Server: server-side request forgery Enterprise ServerHigh8.2Sep 1 CVE-2026-18730Enterprise Server3.17.*+3 more	Enterprise Server	High8.2	3.17.*+3 more
Aug 29	Arbitrary host filesystem & Docker-socket mounts via MCP server `mounts` GitHubCritical9.6Aug 29 GHSA-846c-fpfg-rj9mGitHubNo fix yet	GitHub	Critical9.6	No fix yet
Aug 27	Safe-output artifacts may expose CI trigger tokens GitHubCritical9.1Aug 27 GHSA-8h78-hpm7-29ggGitHub0.85.4	GitHub	Critical9.1	0.85.4
Aug 25	gh-aw: github.event.* command injection via heredoc-blind template guardrails (MCP config, all engines) GitHubHigh8.5Aug 25 GHSA-796c-cr8h-rr49GitHubNo fix yet	GitHub	High8.5	No fix yet
Aug 16	GitHub: command injection GitHubHigh8.5Aug 16 GHSA-gh77-fhfh-2mc5GitHubv0.87.0	GitHub	High8.5	v0.87.0
Aug 16	GitHub: improper authorization GitHubHigh8.8Aug 16 GHSA-r8gh-v7wv-8g7hGitHubv0.87.0	GitHub	High8.8	v0.87.0
Aug 8	gh-aw: safe-output validator forwards undeclared agent fields to the appliers (scope escape / mass assignment) GitHubCritical9.1Aug 8 GHSA-jxrq-hq57-gwwmGitHubv0.86.1	GitHub	Critical9.1	v0.86.1
Aug 7	gh-aw: unauthenticated prompt-injection to code execution in the shipped ai-moderator workflow GitHubMedium6.5Aug 7 GHSA-2cwf-x2h8-mqj5GitHubv0.86.1	GitHub	Medium6.5	v0.86.1
Aug 7	command injection in compiled workflow via unsanitized `sandbox.mcp.env` exports GitHubCritical9.6Aug 7 GHSA-j77w-g4jj-hp99GitHubv0.86.0	GitHub	Critical9.6	v0.86.0
Aug 7	gh-aw: URL allowlist bypass via userinfo @ in the content sanitizer (exfiltration channel) GitHubMedium6.8Aug 7 GHSA-73j6-rcxw-76w7GitHubv0.86.0	GitHub	Medium6.8	v0.86.0
Aug 6	Safe-outputs config emitter: JSON injection via templated values despite env-var indirection GitHubHigh8.5Aug 6 GHSA-2wjq-689w-pprhGitHubv0.78.0	GitHub	High8.5	v0.78.0
Aug 5	GitHub Enterprise Server: denial of service Enterprise ServerMedium6.6Aug 5 CVE-2026-15996Enterprise ServerNo fix yet	Enterprise Server	Medium6.6	No fix yet
Aug 5	GitHub Enterprise Server: path traversal Enterprise ServerHigh8.8Aug 5 CVE-2026-17556Enterprise ServerNo fix yet	Enterprise Server	High8.8	No fix yet
Jul 28	GitHub MCP Server has Nil Pointer Dereference DoS in completion/complete Handler github-mcp-serverHigh7.5Jul 28 CVE-2026-47427github-mcp-server1.1.0	github-mcp-server	High7.5	1.1.0
Jul 17	GitHub Enterprise Server: missing authorization Enterprise ServerMedium5.3Jul 17 CVE-2026-15783Enterprise ServerNo fix yet	Enterprise Server	Medium5.3	No fix yet
Jul 17	GitHub Enterprise Server: denial of service Enterprise ServerMedium5.7Jul 17 CVE-2026-15007Enterprise ServerNo fix yet	Enterprise Server	Medium5.7	No fix yet
Jul 17	GitHub Enterprise Server: path traversal Enterprise ServerHigh8.6Jul 17 CVE-2026-15343Enterprise ServerNo fix yet	Enterprise Server	High8.6	No fix yet
Jul 1	GitHub Enterprise Server: improper authorization Enterprise ServerMedium5.3Jul 1 CVE-2026-14340Enterprise ServerNo fix yet	Enterprise Server	Medium5.3	No fix yet
Jun 25	GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion github-mcp-serverMedium6.0Jun 25 CVE-2026-48529github-mcp-server1.1.2	github-mcp-server	Medium6.0	1.1.2
Jun 3	CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input GitHubMedium4.7Jun 3 CVE-2026-54163GitHub7.3.0	GitHub	Medium4.7	7.3.0
May 11	GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor copilot-cliHigh7.8May 11 CVE-2026-45033copilot-cli1.0.43	copilot-cli	High7.8	1.0.43
Mar 6	GitHub Copilot CLI Dangerous Shell Expansion Patterns Enable Arbitrary Code Execution copilot-cliHighMar 6 CVE-2026-29783copilot-cli0.0.423	copilot-cli	High	0.0.423
Jan 242025	GitHub PAT written to debug artifacts GitHubHighJan 24, 2025 CVE-2025-24362GitHub3.28.3+1 more	GitHub	High	3.28.3+1 more
Jul 252024	Arbitrary File Overwrite in CodeQL versions less than 2.18.1 GitHubHighJul 25, 2024 CVE-2023-4759GitHub2.18.1	GitHub	High	2.18.1
Feb 222024	Limited data exfiltration in CodeQL CLI GitHubLow2.7Feb 22, 2024 CVE-2024-25129GitHub2.16.3	GitHub	Low2.7	2.16.3
May 252021	### Impact The CodeQL runner tool GitHubMedium4.4May 25, 2021 CVE-2021-32638GitHubcodeql-bundle-20210304	GitHub	Medium4.4	codeql-bundle-20210304
Jan 222020	Limited header injection when using dynamic overrides with user input GitHubMediumJan 22, 2020 CVE-2020-5216GitHub~3.9	GitHub	Medium	~3.9
Jan 222020	Directive injection when using dynamic overrides with user input GitHubMediumJan 22, 2020 CVE-2020-5217GitHub~3.8	GitHub	Medium	~3.8
Nov 222019	Arbitrary code execution when opening a malicious workspace GitHubHighNov 22, 2019 CVE-2019-16765GitHub1.0.1	GitHub	High	1.0.1

About GitHub

GitHub is a proprietary developer platform that allows developers to create, store, manage, and share their code. Popular games such as 2048 and Hextris have been known to be hosted on the platform.

Elsewhere on fru.dev: Paydays · Releases · Repos · Trending

Critical advisories by email