CVE-2026-64655 affecting package gh for versions less than 2.97.0-1

CVE-2026-64655 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

DEBIAN-CVE-2026-64655

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, gh attestation verify builds the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values without escaping regex metacharacters, so a user-supplied repository or workflow name is...