TI-2026-35862 CVE-2026-48501 · GHSA-8xvp-7hj6-mcj9
GitHub CLI tokens leak via `gh attestation` commands
Priority MEDIUM 41
GitHub CLI (gh) is GitHub’s official command line tool.
Vulnerabilities
3 records
TI-2026-33538 CVE-2026-45803 · GHSA-crc3-h8v6-qh57
gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection
Priority MEDIUM 50
`gh` is GitHub’s official command line tool.
TI-2024-34983 CVE-2024-52308 · GHSA-p2h2-3vg9-4p87
Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer
Priority MEDIUM 45
The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands.