{"items":[{"id":"CVE-2026-72924","published":"2026-08-25T21:03:11.560Z","updated":"2026-08-26T14:39:06.844Z","title":"GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default","severity":"LOW","score":2.1,"vendor":"cli","product":"cli","kev":false,"epss":0.00257,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64655","published":"2026-08-06T18:41:54.628Z","updated":"2026-08-08T02:23:17.134Z","title":"GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching","severity":"LOW","score":2.1,"vendor":"cli","product":"cli","kev":false,"epss":0.00343,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64654","published":"2026-08-06T18:27:38.491Z","updated":"2026-08-07T17:09:40.307Z","title":"GitHub CLI: Terminal escape sequence injection in multiple `gh` commands","severity":"MEDIUM","score":5.3,"vendor":"cli","product":"cli","kev":false,"epss":0.00769,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64653","published":"2026-08-06T17:51:54.344Z","updated":"2026-08-07T14:54:13.120Z","title":"GitHub CLI: Unescaped variable components in request URLs could allow path traversal","severity":"MEDIUM","score":5.1,"vendor":"cli","product":"cli","kev":false,"epss":0.00511,"kevAdded":null,"exploit":false},{"id":"CVE-2026-64652","published":"2026-08-06T17:45:35.729Z","updated":"2026-08-07T17:45:03.284Z","title":"GitHub CLI: Partial token disclosure in `gh auth status` output","severity":"LOW","score":3.3,"vendor":"cli","product":"cli","kev":false,"epss":0.00155,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59831","published":"2026-07-09T22:11:05.418Z","updated":"2026-07-14T01:20:59.985Z","title":"GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace","severity":"MEDIUM","score":4.4,"vendor":"cli","product":"cli","kev":false,"epss":0.00326,"kevAdded":null,"exploit":false},{"id":"CVE-2026-48501","published":"2026-05-29T15:14:54.975Z","updated":"2026-05-29T17:14:30.823Z","title":"GitHub CLI tokens leak via `gh attestation` commands","severity":"HIGH","score":7.4,"vendor":"cli","product":"cli","kev":false,"epss":0.00289,"kevAdded":null,"exploit":false},{"id":"CVE-2026-45803","published":"2026-05-15T15:26:56.675Z","updated":"2026-05-15T17:48:01.444Z","title":"gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection","severity":"LOW","score":3.5,"vendor":"cli","product":"cli","kev":false,"epss":0.00206,"kevAdded":null,"exploit":true},{"id":"CVE-2025-48938","published":"2025-05-30T18:45:59.753Z","updated":"2025-05-30T20:38:51.984Z","title":"Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server","severity":"LOW","score":2.6,"vendor":"cli","product":"go-gh","kev":false,"epss":0.00564,"kevAdded":null,"exploit":false},{"id":"CVE-2025-25204","published":"2025-02-14T16:38:29.038Z","updated":"2025-03-03T19:13:28.888Z","title":"`gh attestation verify` returns incorrect exit code during verification if no attestations are present","severity":"MEDIUM","score":6.3,"vendor":"cli","product":"cli","kev":false,"epss":0.00406,"kevAdded":null,"exploit":true},{"id":"CVE-2024-54132","published":"2024-12-04T15:29:07.426Z","updated":"2024-12-04T21:40:02.517Z","title":"GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability","severity":"MEDIUM","score":6.3,"vendor":"cli","product":"cli","kev":false,"epss":0.00629,"kevAdded":null,"exploit":false},{"id":"CVE-2024-53858","published":"2024-11-27T21:25:14.071Z","updated":"2024-12-03T15:04:45.637Z","title":"Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli","severity":"MEDIUM","score":6.5,"vendor":"cli","product":"cli","kev":false,"epss":0.00279,"kevAdded":null,"exploit":false},{"id":"CVE-2024-53859","published":"2024-11-27T21:25:12.391Z","updated":"2024-12-03T16:15:49.930Z","title":"go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace","severity":"MEDIUM","score":6.5,"vendor":"cli","product":"go-gh","kev":false,"epss":0.00548,"kevAdded":null,"exploit":false},{"id":"CVE-2024-52308","published":"2024-11-14T22:55:38.693Z","updated":"2024-11-15T19:33:42.842Z","title":"Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer","severity":"HIGH","score":8,"vendor":"cli","product":"cli","kev":false,"epss":0.00906,"kevAdded":null,"exploit":false}]}