Github Cli vulnerabilities
- cli GitHub CLI tokens leak via `gh attestation` commands 7.4 High
- cli gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection 3.5 Low
- github copilot-cli GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor 8.5 High
- github copilot-cli, copilot command line interface +1 more GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution 7.5 High
- cli Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli 6.5 Medium
- cli Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer 8.0 High
- github codeql cli, codeql-cli-binaries +1 more Limited data exfiltration in CodeQL CLI 2.7 Low