gh vulnerabilities (Azure Linux)
61 vulnerabilities.
ghAzure LinuxGitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability6.3 MediumghAzure LinuxRecursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli6.5 MediumghAzure Linuxgo-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace6.5 MediumghAzure LinuxConnecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer8.0 HighghAzure LinuxHTTP/2 CONTINUATION flood in net/http7.5 HighghAzure LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighghAzure LinuxExcessive memory growth in net/http and golang.org/x/net/http25.3 MediumghAzure LinuxDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 HighghAzure Linuxx/crypto/ssh vulnerable to panic via malformed packets7.5 HighghAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical