gh vulnerabilities (Debian)
11 vulnerabilities.
-
ghDebian GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default 2.1 Low -
ghDebian GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching 2.1 Low -
ghDebian GitHub CLI: Terminal escape sequence injection in multiple `gh` commands 5.3 Medium -
ghDebian GitHub CLI: Unescaped variable components in request URLs could allow path traversal 5.1 Medium -
ghDebian GitHub CLI: Partial token disclosure in `gh auth status` output 3.3 Low -
ghDebian GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace 4.4 Medium -
ghDebian GitHub CLI tokens leak via `gh attestation` commands 7.4 High -
ghDebian gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection 3.5 Low -
ghDebian GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability 6.3 Medium -
ghDebian Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli 6.5 Medium -
ghDebian Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer 8.0 High