U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesCVMAP

CWE Statistics for GitHub, Inc. as of 02/28/2026

11120
40
 
40
27
Reference
0-69.9%
Provider
67.5
Contributor
70-94.9%
 
Provider
95-100%
CVE CNA Value Alignment NIST Value Reason
CVE-2025-61684   (0 of 1) CWE-20 ≠ CWE-617 Not enough information to confidently identify CWE ("NVD-CWE-Insufficient-Info" selected)
CVE-2025-61916   (3 of 3) CWE-918 CWE-918
CWE-20 More specific CWE option available
CWE-523 More specific CWE option available
CVE-2026-23947   (0 of 1) CWE-77 ≠ CWE-94 More specific CWE option available
CVE-2026-24132   (0 of 1) CWE-77 ≠ CWE-94 More specific CWE option available
CVE-2026-25136   (2 of 2) CWE-79 CWE-79
CWE-1004 More specific CWE option available
CVE-2026-25543   (0 of 1) CWE-116 ≠ CWE-79 More specific CWE option available
CVE-2026-25648   (2 of 2) CWE-79 CWE-79
CWE-434 More specific CWE option available
CVE-2026-25649   (2 of 2) CWE-601 CWE-601
CWE-352 More specific CWE option available
CVE-2026-25733   (2 of 2) CWE-79 CWE-79
CWE-1004 More specific CWE option available
CVE-2026-25734   (2 of 2) CWE-79 CWE-79
CWE-1004 More specific CWE option available
CVE-2026-25735   (2 of 2) CWE-79 CWE-79
CWE-1004 More specific CWE option available
CVE-2026-25736   (2 of 2) CWE-79 CWE-79
CWE-1004 More specific CWE option available
CVE-2026-25890   (2 of 2) CWE-863 CWE-863
CWE-706 More specific CWE option available
CVE-2026-25897   (0 of 1) CWE-122 ≠ CWE-190 More specific CWE option available
CVE-2026-25899   (1 of 1) CWE-789 CWE-770
CVE-2026-25961   (2 of 2) CWE-494 CWE-494
CWE-295 More specific CWE option available
CVE-2026-25967   (1 of 1) CWE-121 CWE-787
CVE-2026-25968   (1 of 1) CWE-121 CWE-787
CVE-2026-25971   (0 of 1) CWE-674 ≠ CWE-787 More specific CWE option available
CVE-2026-25989   (1 of 2) CWE-190 ≠ CWE-193 More specific CWE option available
CWE-681 More specific CWE option available
CVE-2026-26003   (1 of 1) CWE-601 CWE-601
CVE-2026-26066   (2 of 2) CWE-835 CWE-835
CWE-400 More specific CWE option available
CVE-2026-26068   (2 of 2) CWE-78 CWE-78
CWE-77
CVE-2026-26284   (1 of 2) CWE-122 ≠ CWE-125 More specific CWE option available
CWE-787 More specific CWE option available
CVE-2026-26983   (0 of 1) CWE-476 ≠ CWE-416 More specific CWE option available
CVE-2026-27013   (2 of 2) CWE-79 CWE-79
CWE-116 More specific CWE option available
CVE-2026-27117   (3 of 3) CWE-22 CWE-22
CWE-23 CWE-22
CWE-36 CWE-22
CVE-2026-27146   (2 of 2) CWE-352 CWE-352
CWE-434 More specific CWE option available
CVE-2026-27204   (4 of 4) CWE-770 CWE-770
CWE-774 CWE-770
CWE-789 CWE-770
CWE-400
CVE-2026-27208   (4 of 4) CWE-78 CWE-78
CWE-250 More specific CWE option available
CWE-269 More specific CWE option available
CWE-88 More specific CWE option available
CVE-2026-27457   (2 of 2) CWE-862 CWE-862
CWE-200 More specific CWE option available
CVE-2026-27607   (2 of 2) CWE-863 CWE-863
CWE-20 More specific CWE option available
CVE-2026-27615   (2 of 2) CWE-829 CWE-829
CWE-40 More specific CWE option available
CVE-2026-27630   (0 of 1) CWE-400 ≠ CWE-770
CVE-2026-27633   (0 of 1) CWE-400 ≠ CWE-770
CVE-2026-27641   (0 of 1) CWE-1336 ≠ CWE-22 More specific CWE option available
CVE-2026-27691   (2 of 2) CWE-190 CWE-190
CWE-681 More specific CWE option available
CVE-2026-27692   (3 of 3) CWE-787 CWE-787
CWE-125 More specific CWE option available
CWE-170 More specific CWE option available
CVE-2026-28213   (2 of 2) CWE-640 CWE-640
CWE-200 More specific CWE option available
CVE-2026-28217   (0 of 1) CWE-862 ≠ CWE-639 More specific CWE option available