Github

Cli

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2026-48501

  • EPSS 0.29%
  • Veröffentlicht 29.05.2026 16:16:31
  • Zuletzt bearbeitet 03.06.2026 21:06:15

GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands. The C...

3.5

CVE-2026-45803

Exploit
  • EPSS 0.21%
  • Veröffentlicht 15.05.2026 15:26:56
  • Zuletzt bearbeitet 21.05.2026 23:47:57

`gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users view GitHub Actions workflow logs using gh run view --...

6.3

CVE-2024-54132

  • EPSS 0.63%
  • Veröffentlicht 04.12.2024 16:15:26
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The GitHub CLI is GitHub’s official command line tool. A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through ...

6.5

CVE-2024-53858

  • EPSS 0.28%
  • Veröffentlicht 27.11.2024 22:15:05
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The gh cli is GitHub’s official command line tool. A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing `git` submodules hosted outside of GitHub.com and ghe.com. Th...

9.6

CVE-2024-52308

  • EPSS 0.86%
  • Veröffentlicht 14.11.2024 23:15:05
  • Zuletzt bearbeitet 20.11.2024 15:07:43

The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0. Developers connect to ...