Release notes - GitHub Enterprise Server 3.7 Docs

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2023-6746Sensitive Information in Log File in GitHub Enterprise Server
• CVE-2023-22381Code injection in GitHub Enterprise Server leading to arbitrary environment variables in GitHub Actions
• CVE-2023-23760Path traversal in GitHub Enterprise Server leading to remote code execution
• CVE-2023-23762Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
• CVE-2023-23761Improper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists
• CVE-2023-46646Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint
• CVE-2023-23764Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
• CVE-2023-23763Information disclosure in GitHub Enterprise Server leading to private repository leakage
• CVE-2023-23765Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling
• CVE-2023-46645Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site
• CVE-2023-51379Incorrect Authorization for Issue Comments in GitHub Enterprise Server
• CVE-2023-51380Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server
• CVE-2023-46649Race Condition allows Administrative Access on Organization Repositories

Source and provenance

Original title: Release notes - GitHub Enterprise Server 3.7 Docs. Captured 29 Sept 2026, 02:41 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.