CVE-2026-59831 GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...

CVE-2026-59831

GitHub CLI gh is GitHub’s official command line tool. From 2.10.0 through 2.95.0, connecting to a malicious Codespace with gh codespace jupyter can allow command execution because the command opens a JupyterLab URL supplied by a process inside the Codespace without validating that it is a loopbac...

CVE-2026-59831

Summary: CVE-2026-59831 affects GitHub CLI (gh) prior to 2.96.0. When using the command gh codespace jupyter, a malicious Codespace could supply a JupyterLab URL to the process inside the Codespace without validating that it is a loopback address, enabling a crafted vscode:// or vscode-insiders:/...

GHSA-V722-58F9-VCJ4 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-qemu, linux-gcp, linux-azure...

GHSA-J39G-274J-3WPM vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PXF9-8XFQ-9XVG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CRVR-3R6G-3G4X vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-MC52-82M8-RRW6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RGW6-446J-4GH8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-Q3QQ-QQRH-7WXQ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-R3X8-667C-JHVP vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-FGG3-FXGG-9482 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-JMXM-FM2M-R778 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-VR3H-9WM8-MCR4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WX3W-R2PW-7WXR vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-X6W2-JPMX-X267 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-V68W-64JW-RFJJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W2GV-3XQ6-W58F vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-CWC7-H32G-JV39 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F4WC-QC7X-8G92 vulnerabilities

Vulnerabilities for packages: chromium...