Vulnerabilities

TI-2026-51140 CVE-2026-72924

GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default

LOW 11

GitHub CLI (gh) is GitHub's official command line tool.

CVSS 4.0LOW 2.1 Adjacent network Low privileges No interaction EPSS 0.00257 Published 2026-08-25 Partial fix · 2.98.0 CWE-1327

TI-2026-46216 CVE-2026-64655 · GHSA-mm27-mwq9-fr5g

GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching

LOW 17

GitHub CLI (gh) is GitHub’s official command line tool.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00343 Published 2026-08-06 Fixed in 2.97.0 CWE-185

TI-2026-46215 CVE-2026-64654

GitHub CLI: Terminal escape sequence injection in multiple `gh` commands

LOW 25

GitHub CLI (gh) is GitHub's official command line tool.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00769 Published 2026-08-06 Fixed in 2.97.0 CWE-150

TI-2026-46214 CVE-2026-64653 · GHSA-4fjg-2h4q-fwg3

GitHub CLI: Unescaped variable components in request URLs could allow path traversal

LOW 24

GitHub CLI (gh) is GitHub’s official command line tool.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00511 Published 2026-08-06 Fixed in 2.97.0 CWE-22

TI-2026-46213 CVE-2026-64652 · GHSA-cg6r-mpgc-h9mm

GitHub CLI: Partial token disclosure in `gh auth status` output

LOW 15

GitHub CLI (gh) is GitHub's official command line tool.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00155 Published 2026-08-06 Fixed in 2.97.0 CWE-201

TI-2026-42647 CVE-2026-59831

GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

LOW 20

GitHub CLI (gh) is GitHub’s official command line tool.

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00326 Published 2026-07-09 Fixed in 2.96.0 CWE-829

TI-2026-35862 CVE-2026-48501 · GHSA-8xvp-7hj6-mcj9

GitHub CLI tokens leak via `gh attestation` commands

MEDIUM 41

GitHub CLI (gh) is GitHub’s official command line tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00289 Published 2026-05-29 Partial fix · 2.93.0 CWE-863

TI-2026-33538 CVE-2026-45803 · GHSA-crc3-h8v6-qh57

gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection

MEDIUM 50

`gh` is GitHub’s official command line tool.

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00206 Published 2026-05-15 Fixed in 2.92.0 CWE-150

TI-2025-31076 CVE-2025-48938 · GHSA-g9f5-x53j-h563

Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

LOW 14

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier.

CVSS 4.0LOW 2.6 Network Low privileges No interaction EPSS 0.00564 Published 2025-05-30 Fixed in 2.12.1 CWE-501

TI-2025-18873 CVE-2025-25204 · GHSA-fgw4-v983-mgp8

`gh attestation verify` returns incorrect exit code during verification if no attestations are present

MEDIUM 63

`gh` is GitHub’s official command line tool.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00406 Published 2025-02-14 Fixed in 2.67.0 CWE-390

TI-2024-36248 CVE-2024-54132 · GHSA-2m9h-r57g-45pj

GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability

LOW 29

The GitHub CLI is GitHub’s official command line tool.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00629 Published 2024-12-04 Fixed in 2.63.1 CWE-22

TI-2024-36051 CVE-2024-53858 · GHSA-jwcm-9g39-pmcw

Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

LOW 31

The gh cli is GitHub’s official command line tool.

CVSS 3.1MEDIUM 6.5 Local No auth User interaction EPSS 0.00279 Published 2024-11-27 Fixed in 2.63.0 CWE-200

TI-2024-36052 CVE-2024-53859 · GHSA-55v3-xh23-96gh

go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace

LOW 36

go-gh is a Go module for interacting with the `gh` utility and the GitHub API from the command line.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00548 Published 2024-11-27 Fixed in 2.11.1 CWE-200

TI-2024-34983 CVE-2024-52308 · GHSA-p2h2-3vg9-4p87

Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer

MEDIUM 45

The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00906 Published 2024-11-14 Fixed in 2.62.0 CWE-77

Vulnerabilities

Filters