Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

github

About This Vendor

github is a technology vendor producing software and infrastructure products. As a software provider, github's broad product portfolio across multiple domains—including operating systems, cloud infrastructure, enterprise applications, databases, networking, and security tools—creates a large attack surface. Additionally, long support cycles, widespread deployment, and continuous feature development contribute to the accumulation of discovered vulnerabilities over time. Major vendors typically report higher CVE counts not necessarily due to inferior security, but because of greater exposure to security research, responsible disclosure practices, and the sheer complexity of maintaining multiple product lines and legacy systems. Regular security assessments and patching of github's products are critical for organizations running their software in production environments.

Vulnerability Trends for This Vendor

SecUtils has indexed 128 known vulnerabilities from github. This includes 19 critical-severity issues and 39 high-severity issues that represent significant risk. These vulnerabilities affect 19 distinct products across github's portfolio, demonstrating the breadth of the vendor's product ecosystem and the importance of comprehensive patch management strategies. Disclosure dates span from 2012 through 2026, indicating decades of continuous security attention and research. Organizations deploying github products should maintain active vulnerability monitoring, prioritize critical patches, and implement compensating controls where patches cannot be applied immediately.

ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2012-2055 2012-04-05 2025-04-11 7.5 5.0 Likely
CVE-2012-5814 2012-11-04 2025-04-11 - 5.8 Likely
CVE-2014-0177 2014-05-27 2025-04-12 - 3.6 Unknown
CVE-2017-18365 2019-03-28 2024-11-21 9.8 7.5 Likely
CVE-2020-10516 2020-06-03 2024-11-21 9.8 7.5 Likely
CVE-2020-10517 2020-08-27 2024-11-21 4.3 4.0 Likely
CVE-2020-10518 2020-08-27 2024-11-21 8.8 6.5 Likely
CVE-2020-10519 2021-03-03 2024-11-21 8.8 6.5 Likely
CVE-2021-22861 2021-03-03 2024-11-21 6.5 4.0 Likely
CVE-2021-22862 2021-03-03 2024-11-21 6.5 4.0 Likely
CVE-2021-22863 2021-03-03 2024-11-21 8.1 5.5 Likely
CVE-2021-22864 2021-03-23 2024-11-21 8.8 6.5 Likely
CVE-2021-22865 2021-04-02 2024-11-21 6.5 4.3 Likely
CVE-2021-22866 2021-05-14 2024-11-21 8.8 6.8 Likely
CVE-2021-32638 2021-05-25 2024-11-21 4.4 2.1 Unknown
CVE-2021-22867 2021-07-14 2024-11-21 6.5 4.0 Likely
CVE-2021-22868 2021-09-24 2024-11-21 4.3 4.0 Likely
CVE-2021-22869 2021-09-24 2024-11-21 9.8 7.5 Likely
CVE-2021-22870 2021-11-10 2024-11-21 6.5 4.0 Likely
CVE-2021-41598 2022-01-25 2024-11-21 8.8 6.8 Likely
CVE-2022-21687 2022-02-01 2025-05-05 6.8 4.3 Likely
CVE-2021-41599 2022-02-18 2024-11-21 8.8 6.5 Likely
CVE-2022-24722 2022-03-02 2024-11-21 8.1 4.3 Likely
CVE-2022-24724 2022-03-03 2024-11-21 8.8 7.5 Likely
CVE-2022-23732 2022-04-05 2024-11-21 8.8 6.8 Likely
CVE-2022-23733 2022-08-02 2024-11-21 5.4 - -
CVE-2022-35954 2022-08-15 2024-11-21 5.0 - -
CVE-2022-39209 2022-09-15 2024-11-21 7.5 - -
CVE-2022-23734 2022-10-19 2025-05-09 8.8 - -
CVE-2022-39321 2022-10-25 2024-11-21 8.8 - -
CVE-2022-23738 2022-11-01 2025-05-06 5.7 - -
CVE-2022-23740 2022-11-23 2025-04-28 8.8 - -
CVE-2022-23737 2022-12-01 2025-04-24 6.5 - -
CVE-2022-46255 2022-12-14 2025-04-22 9.8 - -
CVE-2022-46256 2022-12-14 2025-04-22 8.8 - -
CVE-2022-23741 2022-12-14 2025-04-22 7.2 - -
CVE-2015-10031 2023-01-08 2024-11-21 5.5 5.2 Unknown
CVE-2022-46258 2023-01-09 2025-04-09 6.5 - -
CVE-2022-23739 2023-01-17 2025-04-08 9.8 - -
CVE-2023-22483 2023-01-23 2024-11-21 3.5 - -
CVE-2023-22484 2023-01-23 2024-11-21 3.5 - -
CVE-2023-22485 2023-01-24 2024-11-21 5.3 - -
CVE-2023-22486 2023-01-26 2024-11-21 3.5 - -
CVE-2023-22380 2023-02-16 2025-03-19 6.5 - -
CVE-2023-22381 2023-03-02 2024-11-21 4.1 - -
CVE-2022-46257 2023-03-07 2024-11-21 4.3 - -
CVE-2023-23760 2023-03-08 2024-11-21 4.9 - -
CVE-2023-24824 2023-03-31 2024-11-21 5.3 - -
CVE-2023-26485 2023-03-31 2024-11-21 5.3 - -
CVE-2023-23761 2023-04-07 2024-11-21 7.7 - -
CVE-2023-23762 2023-04-07 2024-11-21 6.5 - -
CVE-2023-36867 2023-07-11 2024-11-21 7.8 - -
CVE-2023-37463 2023-07-13 2024-11-21 6.4 - -
CVE-2023-23764 2023-07-27 2024-11-21 4.8 - -
CVE-2023-23765 2023-08-30 2024-11-21 4.8 - -
CVE-2023-23763 2023-09-01 2024-11-21 5.3 - -
CVE-2023-23766 2023-09-22 2024-11-21 4.5 - -
CVE-2023-46645 2023-12-21 2024-11-21 6.8 - -
CVE-2023-46646 2023-12-21 2024-12-16 5.3 - -
CVE-2023-46647 2023-12-21 2024-11-21 8.0 - -
CVE-2023-46648 2023-12-21 2024-11-21 8.3 - -
CVE-2023-46649 2023-12-21 2024-11-21 6.3 - -
CVE-2023-51379 2023-12-21 2024-12-16 4.9 - -
CVE-2023-51380 2023-12-21 2024-12-16 2.7 - -
CVE-2023-6690 2023-12-21 2024-11-21 3.9 - -
CVE-2023-6746 2023-12-21 2024-12-16 8.1 - -
CVE-2023-6802 2023-12-21 2024-11-21 7.2 - -
CVE-2023-6803 2023-12-21 2024-11-21 5.8 - -
CVE-2023-6804 2023-12-21 2024-11-21 6.5 - -
CVE-2023-6847 2023-12-21 2024-11-21 7.5 - -
CVE-2024-22051 2024-01-04 2025-11-29 9.8 - -
CVE-2024-0200 2024-01-16 2024-11-21 7.2 - -
CVE-2024-0507 2024-01-16 2024-11-21 6.5 - -
CVE-2024-1082 2024-02-13 2024-11-21 6.3 - -
CVE-2024-1084 2024-02-13 2024-11-21 6.5 - -
CVE-2024-1354 2024-02-13 2024-11-21 8.0 - -
CVE-2024-1355 2024-02-13 2025-03-24 9.1 - -
CVE-2024-1359 2024-02-13 2024-11-21 9.1 - -
CVE-2024-1369 2024-02-13 2024-11-21 9.1 - -
CVE-2024-1372 2024-02-13 2024-11-21 9.1 - -
CVE-2024-1374 2024-02-13 2024-11-21 9.1 - -
CVE-2024-1378 2024-02-13 2024-11-21 9.1 - -
CVE-2024-1482 2024-02-14 2025-01-23 7.1 - -
CVE-2024-25129 2024-02-22 2025-02-05 2.7 - -
CVE-2024-2443 2024-03-20 2025-09-04 9.1 - -
CVE-2024-2469 2024-03-20 2025-09-04 8.0 - -
CVE-2024-2748 2024-03-21 2025-09-02 4.3 - -
CVE-2024-1908 2024-03-21 2025-09-02 6.3 - -
CVE-2024-3470 2024-04-19 2025-09-02 5.9 - -
CVE-2024-3646 2024-04-19 2025-09-02 8.0 - -
CVE-2024-3684 2024-04-19 2025-09-02 8.0 - -
CVE-2024-2440 2024-04-19 2025-09-02 5.5 - -
CVE-2024-4985 2024-05-20 2025-08-27 9.8 - -
CVE-2024-5746 2024-06-20 2025-08-27 7.6 - -
CVE-2024-5566 2024-07-16 2024-11-21 5.8 - -
CVE-2024-5795 2024-07-16 2024-11-21 7.7 - -
CVE-2024-5815 2024-07-16 2024-11-21 6.5 - -
CVE-2024-5816 2024-07-16 2024-11-21 5.3 - -
CVE-2024-5817 2024-07-16 2024-11-21 6.5 - -
CVE-2024-6336 2024-07-16 2024-11-21 5.3 - -
CVE-2024-6395 2024-07-16 2024-11-21 5.3 - -
CVE-2024-6337 2024-08-20 2024-09-27 6.5 - -
CVE-2024-6800 2024-08-20 2024-09-30 9.8 - -
CVE-2024-7711 2024-08-20 2024-09-27 4.3 - -
CVE-2024-42471 2024-09-02 2025-08-27 7.3 - -
CVE-2024-8263 2024-09-23 2024-09-30 2.7 - -
CVE-2024-8770 2024-09-23 2024-09-27 6.1 - -
CVE-2024-9487 2024-10-10 2024-11-15 9.1 - -
CVE-2024-9539 2024-10-11 2024-11-15 4.3 - -
CVE-2024-10007 2024-11-07 2025-08-27 9.1 - -
CVE-2024-10824 2024-11-07 2025-08-27 6.5 - -
CVE-2024-8810 2024-11-07 2025-08-27 6.5 - -
CVE-2024-52308 2024-11-14 2024-11-20 8.0 - -
CVE-2025-23369 2025-01-21 2025-09-05 8.8 - -
CVE-2024-10001 2025-01-29 2025-09-05 7.1 - -
CVE-2025-3124 2025-04-17 2025-09-05 4.3 - -
CVE-2025-3246 2025-04-17 2025-09-05 7.6 - -
CVE-2025-3509 2025-04-17 2025-09-05 7.2 - -
CVE-2025-6600 2025-07-01 2025-09-05 4.3 - -
CVE-2025-6981 2025-07-15 2025-08-27 4.3 - -
CVE-2025-8447 2025-08-26 2025-09-03 3.1 - -
CVE-2025-11578 2025-11-10 2025-12-08 7.2 - -
CVE-2025-11892 2025-11-10 2025-12-08 9.6 - -
CVE-2025-14046 2025-12-11 2025-12-19 6.1 - -
CVE-2025-13744 2026-01-06 2026-01-30 5.4 - -
CVE-2026-0573 2026-02-18 2026-02-19 9.0 - -
CVE-2026-1355 2026-02-18 2026-02-19 6.5 - -
CVE-2026-1999 2026-02-18 2026-02-19 6.5 - -

How SecUtils Normalizes Vendor Data

SecUtils aggregates National Vulnerability Database (NVD) and MITRE records for github by normalizing vendor identifiers across diverse data sources, mapping vendor names to their associated product lines, and collecting all known vulnerabilities under a unified vendor context. For every CVE associated with github's products, we extract and structure Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) categories, CVSS severity metrics, and reference links to enable rapid vulnerability identification and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and vendor vulnerability tracking.