Cli · product
cli
12 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.
- Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer
- GitHub CLI: Terminal escape sequence injection in multiple `gh` commands
- GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability
- GitHub CLI: Unescaped variable components in request URLs could allow path traversal
- `gh attestation verify` returns incorrect exit code during verification if no attestations are present
- GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching
- GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace
- GitHub CLI tokens leak via `gh attestation` commands
- Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli
- GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default
- gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection
- GitHub CLI: Partial token disclosure in `gh auth status` output
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.