Imre Rad

Arbitrary command execution through gitRepo volume

Privilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server

Arbitrary code execution via the go command with cgo in cmd/go

Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

Improper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation

An authentication bypass vulnerability was present in the GitHub Enterprise Server (GHES) when utilizing SAML single sign-on authentication with the optional encrypted assertions feature. This vulnerability allowed an attacker to forge a SAML response to