gh vulnerabilities (Ubuntu)
10 vulnerabilities.
-
ghUbuntu GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default 2.1 Low -
ghUbuntu GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching 2.1 Low -
ghUbuntu GitHub CLI: Terminal escape sequence injection in multiple `gh` commands 5.3 Medium -
ghUbuntu GitHub CLI: Unescaped variable components in request URLs could allow path traversal 5.1 Medium -
ghUbuntu GitHub CLI: Partial token disclosure in `gh auth status` output 3.3 Low -
ghUbuntu GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace 4.4 Medium -
ghUbuntu gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection 3.5 Low -
ghUbuntu GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability 6.3 Medium -
ghUbuntu Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli 6.5 Medium -
ghUbuntu Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer 8.0 High