pkg:Go/github.com/cli/cli

All known vulnerabilities

• HIGH8.0CVE-2024-52308Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli
  from 0, < 2.62.0
• HIGH8.0CVE-2024-52308Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli
  from 0
• HIGH7.4CVE-2026-48501GitHub CLI has an incorrect authorization header in API requests to TUF repository mirrors via `gh attestation`, `gh release verify`, and `gh release verify-asset` commands in github.com/cli/cli
  from 0
• MEDIUM6.5Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli
  from 0
• MEDIUM6.3`gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli
  from 0
• LOW3.5GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection in github.com/cli/cli
  >= 1.6.0, <= 1.14.0
• LOW3.5GitHub CLI: GitHub Actions log output in `gh run view` allows terminal escape sequence injection in github.com/cli/cli
  >= 1.6.0
• —Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli
  from 0, <= 1.14.0
• —Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli
  from 0