Github Enterprise Server 3.11.0

Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token

Sensitive Information in Log File in GitHub Enterprise Server

Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data

Sensitive Information in Log File in GitHub Enterprise Server

Race Condition allows Administrative Access on Organization Repositories

Improper Privilege Management allows for arbitrary workflows to be run

Race Condition allows Unauthorized Outside Collaborator

Incorrect Authorization for Issue Comments in GitHub Enterprise Server

Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.