U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CWE Statistics for GitHub, Inc. as of 09/23/2025

8658
41
 
40
25
Reference
0-69.9%
Provider
61.0
Contributor
70-94.9%
 
Provider
95-100%
CVE CNA Value Alignment NIST Value Reason
CVE-2023-50717   (2 of 2) CWE-434 CWE-434
CWE-79 More specific CWE option available
CVE-2024-24818   (0 of 1) CWE-610 CWE-601
CVE-2024-28233   (3 of 3) CWE-79 CWE-79
CWE-352 More specific CWE option available
CWE-565 More specific CWE option available
CVE-2024-34358   (1 of 2) CWE-200 CWE-770 More specific CWE option available
CWE-347 More specific CWE option available
CVE-2024-45801   (0 of 1) CWE-1333 CWE-1321 More specific CWE option available
CVE-2024-51479   (0 of 1) CWE-285 CWE-863 More specific CWE option available
CVE-2024-52598   (3 of 3) CWE-918 CWE-918
CWE-79 More specific CWE option available
CWE-80 More specific CWE option available
CVE-2024-52803   (0 of 1) CWE-79 CWE-78 More specific CWE option available
CVE-2024-53270   (0 of 1) CWE-670 CWE-476 More specific CWE option available
CVE-2025-23207   (0 of 1) CWE-116 CWE-79 More CWEs associated than the CNA provided
CVE-2025-26621   (0 of 1) CWE-94 CWE-1321 More specific CWE option available
CVE-2025-27099   (2 of 2) CWE-79 CWE-79
CWE-80 CWE-79
CVE-2025-29907   (2 of 2) CWE-400 CWE-400
CWE-770 CWE-400
CVE-2025-29927   (0 of 1) CWE-285 CWE-863 More specific CWE option available
CVE-2025-30203   (2 of 2) CWE-79 CWE-79
CWE-84 CWE-79
CVE-2025-32027   (2 of 2) CWE-79 CWE-79
CWE-80 CWE-79
CVE-2025-32793   (0 of 1) CWE-319 CWE-362 More specific CWE option available
CVE-2025-46570   (1 of 1) CWE-208 CWE-203
CVE-2025-47289   (0 of 1) CWE-1004 CWE-79 More specific CWE option available
CVE-2025-47781   (1 of 1) CWE-331 CWE-331
CVE-2025-47792   (0 of 1) CWE-284 CWE-862 More specific CWE option available
CVE-2025-48060   (1 of 1) CWE-121 CWE-787
CVE-2025-48062   (2 of 2) CWE-79 CWE-79
CWE-116 More specific CWE option available
CVE-2025-48957   (1 of 1) CWE-23 CWE-22
CVE-2025-49137   (3 of 3) CWE-79 CWE-79
CWE-80 CWE-79
CWE-87 CWE-79
CVE-2025-53019   (0 of 1) CWE-125 CWE-401 More specific CWE option available
CVE-2025-53628   (1 of 2) CWE-770 CWE-444 More specific CWE option available
CWE-835 More specific CWE option available
CVE-2025-53640   (3 of 3) CWE-639 CWE-639
CWE-200 Not enough information to confidently identify CWE ("NVD-CWE-Insufficient-Info" selected)
CWE-862 Not enough information to confidently identify CWE ("NVD-CWE-Insufficient-Info" selected)
CVE-2025-53944   (0 of 1) CWE-285 CWE-639 More specific CWE option available
CVE-2025-54123   (2 of 2) CWE-78 CWE-78
CWE-20 More specific CWE option available
CVE-2025-54380   (2 of 2) CWE-522 CWE-522
CWE-200 More specific CWE option available
CVE-2025-54574   (1 of 1) CWE-122 CWE-787
CVE-2025-55727   (1 of 1) CWE-95 CWE-94
CVE-2025-55728   (1 of 1) CWE-95 CWE-94
CVE-2025-55735   (2 of 2) CWE-79 CWE-79
CWE-807 More specific CWE option available
CVE-2025-58050   (2 of 2) CWE-122 CWE-787
CWE-125 More specific CWE option available
CVE-2025-58447   (1 of 1) CWE-122 CWE-787
CVE-2025-58745   (2 of 2) CWE-434 CWE-434
CWE-94 More specific CWE option available
CVE-2025-58750   (3 of 3) CWE-125 CWE-125
CWE-787 CWE-787
CWE-119
CVE-2025-58768   (0 of 1) CWE-94 CWE-79 More specific CWE option available