← All credits
ahacker1
24 vulnerability records and advisories credit this contributor.
CVE-2026-77912
Stored cross-site scripting vulnerability in GitHub Enterprise Server allowed HTML attribute injection via the Markdown rendering pipeline
CVE-2026-19118
Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution
CVE-2026-9312
Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed access to internal services via path traversal in upload endpoint
CVE-2026-14340
An incorrect authorization vulnerability in GitHub Enterprise Server allows issue creation in unrelated public repositories
CVE-2026-5845
Improper authorization fallback allows scoped user-to-server token installation escape in GitHub Enterprise Server
CVE-2026-3307
Authorization bypass in GitHub Enterprise Server secret scanning push protection allows cross-repository modification of delegated bypass reviewers
CVE-2026-5512
Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API
CVE-2026-4296
Incorrect Regular Expression vulnerability in GitHub Enterprise Server allowed unauthorized access to user accounts via OAuth callback URL validation bypass
CVE-2026-1999
Incorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized merging of pull requests
CVE-2026-3306
Improper authorization in GitHub Projects allows modification of issue and pull request metadata without repository write access